General
- Target 2026-08-03_17d5802bceb92a0a2204306f8d7f7c2a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 40.8MB
- Sample260804-p6wwgs1dja
- SHA256 9c495da6479228e0742b96ef4f261664f90a47cd320a541ec12054e5e7354403
- MD5 17d5802bceb92a0a2204306f8d7f7c2a
- SHA1 d639111c9f12eb2387451cc1798df6c7a347b712
- SHA512 959b3f98d3c4146dd0b736bf06b26650d60e2f09b86238797993df33c67892329d813edc10e8710ab75d301813309912f19bfd29d2d6934af5789a18e74bad52
- SSDEEP 786432:zyZ/K0ttYZTEqTcyZ/K0ttYZTEqTil7yZ/K0ttYZTEqTcyZ/K0ttYZTEqTilF:uZ/K0ttYREqTnZ/K0ttYREqTilmZ/K0y
- TLSH T1E1977D13F2E841A9E0A6D174CE669631EB327C494BF195DF2240B7D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_17d5802bceb92a0a2204306f8d7f7c2a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_17d5802bceb92a0a2204306f8d7f7c2a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_17d5802bceb92a0a2204306f8d7f7c2a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 40.8MB
- SHA256 9c495da6479228e0742b96ef4f261664f90a47cd320a541ec12054e5e7354403
- MD5 17d5802bceb92a0a2204306f8d7f7c2a
- SHA1 d639111c9f12eb2387451cc1798df6c7a347b712
- SHA512 959b3f98d3c4146dd0b736bf06b26650d60e2f09b86238797993df33c67892329d813edc10e8710ab75d301813309912f19bfd29d2d6934af5789a18e74bad52
- SSDEEP 786432:zyZ/K0ttYZTEqTcyZ/K0ttYZTEqTil7yZ/K0ttYZTEqTcyZ/K0ttYZTEqTilF:uZ/K0ttYREqTnZ/K0ttYREqTilmZ/K0y
- TLSH T1E1977D13F2E841A9E0A6D174CE669631EB327C494BF195DF2240B7D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application