General
- Target 2026-08-05_9082aa7537d964304b18962aed2f625d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar_wannacry
- Size 6.2MB
- Sample260805-wk9c1sda69
- SHA256 8d6c3a8ec773541d4a57b117c574a78ba5faeb1744a1267776d9c7266441180a
- MD5 9082aa7537d964304b18962aed2f625d
- SHA1 0a8ca1095b086b2edca6a38138aba7c32f37757a
- SHA512 2a0fe41d87db089c93781c250e6c40ba6266368b6f9688f85d330bd53a4516aeca59eb0545575cfa0ab598a4f8599bf1ec21bf4dee8882d6cec056f73b6588a9
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1je5x6c1/e5x6c1ze5x6c18D:IkQgkQ4D
- TLSH T136668E02F68140F6DBA51930546E7776EA36FA060B15CBC7D364DE692E32280ED3736B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_9082aa7537d964304b18962aed2f625d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_9082aa7537d964304b18962aed2f625d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_9082aa7537d964304b18962aed2f625d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar_wannacry
- Size 6.2MB
- SHA256 8d6c3a8ec773541d4a57b117c574a78ba5faeb1744a1267776d9c7266441180a
- MD5 9082aa7537d964304b18962aed2f625d
- SHA1 0a8ca1095b086b2edca6a38138aba7c32f37757a
- SHA512 2a0fe41d87db089c93781c250e6c40ba6266368b6f9688f85d330bd53a4516aeca59eb0545575cfa0ab598a4f8599bf1ec21bf4dee8882d6cec056f73b6588a9
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1je5x6c1/e5x6c1ze5x6c18D:IkQgkQ4D
- TLSH T136668E02F68140F6DBA51930546E7776EA36FA060B15CBC7D364DE692E32280ED3736B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry