General
- Target 2026-08-04_1d19ed7bcacab313220270fd41dfdc36_amadey_cloudeye_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_smoke-loader_vidar
- Size 3.9MB
- Sample260804-zvbraazfld
- SHA256 36d1eb5edeabf902da39efaefa1b26aade382700ccfa5be252e11cbb771f7bce
- MD5 1d19ed7bcacab313220270fd41dfdc36
- SHA1 db007d2ac3371313ea58c7d897a09aaaa4f65e61
- SHA512 703c6bcd36761a2ff4fb61e583e81025e97425cfb047a6996ee68e0352716bdcc05ec8d35baa01835462cf23d7647920c4a9f78e66198277219f13b7bb70cd18
- SSDEEP 49152:IGT2Kv/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSq4vFWVRxYOKKJY+o:h2KEWQtZ/K0tGOFWVRuLftJ+4jN
- TLSH T19D165913F58505E9D05EC179CF069232EB627C490BF1A6EF36906AE52E37AE07B38711
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_1d19ed7bcacab313220270fd41dfdc36_amadey_cloudeye_cobalt-strike_elex_hijackloader_icedid_l.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_1d19ed7bcacab313220270fd41dfdc36_amadey_cloudeye_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_smoke-loader_vidar
- Size 3.9MB
- SHA256 36d1eb5edeabf902da39efaefa1b26aade382700ccfa5be252e11cbb771f7bce
- MD5 1d19ed7bcacab313220270fd41dfdc36
- SHA1 db007d2ac3371313ea58c7d897a09aaaa4f65e61
- SHA512 703c6bcd36761a2ff4fb61e583e81025e97425cfb047a6996ee68e0352716bdcc05ec8d35baa01835462cf23d7647920c4a9f78e66198277219f13b7bb70cd18
- SSDEEP 49152:IGT2Kv/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSq4vFWVRxYOKKJY+o:h2KEWQtZ/K0tGOFWVRuLftJ+4jN
- TLSH T19D165913F58505E9D05EC179CF069232EB627C490BF1A6EF36906AE52E37AE07B38711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Shodi worm
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory