General
- Target 2026-08-05_0c96486522862161ded298f3f4f86647_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar_wannacry
- Size 6.1MB
- Sample260805-1mqqxaeb95
- SHA256 718048e4c3b481015abf07f40eb024748d3a8ce9d2918f0769d94c7dd1a0d2d4
- MD5 0c96486522862161ded298f3f4f86647
- SHA1 393dfa4cce02e405863479822ee18a168e798d6c
- SHA512 b17e0cc729f538807edf8cd64ca51761e5886c0cbcaa6ddb4afff6a12dc0f66f7e0b75898cdb0ec044f92d7f082880d90ac1831e118384c077cf01e2490322a6
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1je5x6c1/e5x6c1ze5x6c1m:IkQgkQ6
- TLSH T1CE568D02F68140F6DBA5193054AE7776EA36FA060B15CBC7D354DE692E32280ED3736B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_0c96486522862161ded298f3f4f86647_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_0c96486522862161ded298f3f4f86647_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_0c96486522862161ded298f3f4f86647_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar_wannacry
- Size 6.1MB
- SHA256 718048e4c3b481015abf07f40eb024748d3a8ce9d2918f0769d94c7dd1a0d2d4
- MD5 0c96486522862161ded298f3f4f86647
- SHA1 393dfa4cce02e405863479822ee18a168e798d6c
- SHA512 b17e0cc729f538807edf8cd64ca51761e5886c0cbcaa6ddb4afff6a12dc0f66f7e0b75898cdb0ec044f92d7f082880d90ac1831e118384c077cf01e2490322a6
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1je5x6c1/e5x6c1ze5x6c1m:IkQgkQ6
- TLSH T1CE568D02F68140F6DBA5193054AE7776EA36FA060B15CBC7D354DE692E32280ED3736B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry