General
- Target 2026-08-03_8559a773d2d399eb58f21f6087e04905_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 40.4MB
- Sample260804-m49cpaybrg
- SHA256 d82c7ecc42c515238bd9a8a839fb11c43dc92e57f3aeda0bfde581a339c2e267
- MD5 8559a773d2d399eb58f21f6087e04905
- SHA1 cb37047cef6740b3f4c8b7a1a0b4500b4d86a0c6
- SHA512 8935a225913505ecc7bd30da9b30684429478a2c6e7533481b0d5ba29e2b6f44f97c2800f776991320fb1fd277e28481fb3eb65b41cd79e0a9f3878e21828f2e
- SSDEEP 786432:zyZ/K0ttYZTEqTcyZ/K0ttYZTEqT7yZ/K0ttYZTEqTcyZ/K0ttYZTEqTFG:uZ/K0ttYREqTnZ/K0ttYREqTmZ/K0ttW
- TLSH T1A4976D13F2E441A9E0AAD174CF669631EB327C494BF195DF2240B6D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_8559a773d2d399eb58f21f6087e04905_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_8559a773d2d399eb58f21f6087e04905_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_8559a773d2d399eb58f21f6087e04905_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 40.4MB
- SHA256 d82c7ecc42c515238bd9a8a839fb11c43dc92e57f3aeda0bfde581a339c2e267
- MD5 8559a773d2d399eb58f21f6087e04905
- SHA1 cb37047cef6740b3f4c8b7a1a0b4500b4d86a0c6
- SHA512 8935a225913505ecc7bd30da9b30684429478a2c6e7533481b0d5ba29e2b6f44f97c2800f776991320fb1fd277e28481fb3eb65b41cd79e0a9f3878e21828f2e
- SSDEEP 786432:zyZ/K0ttYZTEqTcyZ/K0ttYZTEqT7yZ/K0ttYZTEqTcyZ/K0ttYZTEqTFG:uZ/K0ttYREqTnZ/K0ttYREqTmZ/K0ttW
- TLSH T1A4976D13F2E441A9E0AAD174CF669631EB327C494BF195DF2240B6D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application