General
- Target 2026-08-03_07e96b847d4cbad18a10b8cbe12c7244_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 15.2MB
- Sample260804-qe4mpa1eqb
- SHA256 0f39870760c492ddfe515ceb711b1af24158069a5ea5f81eb9115e5faf900429
- MD5 07e96b847d4cbad18a10b8cbe12c7244
- SHA1 4b77f5bc965984d514c645d4b90c6c58a52a20c1
- SHA512 91b156dded77cc6d1e8e248947a1449cb7969917dae14bbcd97da6af1218619220f077b2405207b68accae6b091904defef12e9da36cc9d8c94ec853d9c4a994
- SSDEEP 196608:JtcITtcIIONWyZ/K0ttYVAAT/vyEYc/b3w8O:IBhhyZ/K0ttYZT/vyEYKbi
- TLSH T1ADF67C12B6E540E5D0AAD034CF668631E7B27C5A4BF096DB2140F6D92F33AD07E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_07e96b847d4cbad18a10b8cbe12c7244_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_07e96b847d4cbad18a10b8cbe12c7244_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_07e96b847d4cbad18a10b8cbe12c7244_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 15.2MB
- SHA256 0f39870760c492ddfe515ceb711b1af24158069a5ea5f81eb9115e5faf900429
- MD5 07e96b847d4cbad18a10b8cbe12c7244
- SHA1 4b77f5bc965984d514c645d4b90c6c58a52a20c1
- SHA512 91b156dded77cc6d1e8e248947a1449cb7969917dae14bbcd97da6af1218619220f077b2405207b68accae6b091904defef12e9da36cc9d8c94ec853d9c4a994
- SSDEEP 196608:JtcITtcIIONWyZ/K0ttYVAAT/vyEYc/b3w8O:IBhhyZ/K0ttYZT/vyEYKbi
- TLSH T1ADF67C12B6E540E5D0AAD034CF668631E7B27C5A4BF096DB2140F6D92F33AD07E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry