General
- Target 2026-08-06_65dbc10b120c853b08956915845548b3_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.0MB
- Sample260806-st2sraytev
- SHA256 a5b23383f7dea606c9d4b83723092617a739ba89883e3fe4757f0d6b3e9e3db4
- MD5 65dbc10b120c853b08956915845548b3
- SHA1 021bf4b866bae3c35bfedc9708662b2dad2bcbe6
- SHA512 982c353d8542bd2e80b7eae6e7773eb5bd5ea6d4e22df36deb1dd8ddc383daf75168a6a48c0106b4b8480691d774963b7f35508ed3a9f6e343920bf7067ffc4c
- SSDEEP 98304:Su5x6M1pLapIAu5x6M1pLapIIoqTezSC6v2XMHtLapISLapI9:JtcITtcIIO6cIScI9
- TLSH T12AB62922B1F200AAC59D9071CF469735E7E23C698FF183E7B145B2D92F325D0763A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_65dbc10b120c853b08956915845548b3_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_65dbc10b120c853b08956915845548b3_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_65dbc10b120c853b08956915845548b3_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.0MB
- SHA256 a5b23383f7dea606c9d4b83723092617a739ba89883e3fe4757f0d6b3e9e3db4
- MD5 65dbc10b120c853b08956915845548b3
- SHA1 021bf4b866bae3c35bfedc9708662b2dad2bcbe6
- SHA512 982c353d8542bd2e80b7eae6e7773eb5bd5ea6d4e22df36deb1dd8ddc383daf75168a6a48c0106b4b8480691d774963b7f35508ed3a9f6e343920bf7067ffc4c
- SSDEEP 98304:Su5x6M1pLapIAu5x6M1pLapIIoqTezSC6v2XMHtLapISLapI9:JtcITtcIIO6cIScI9
- TLSH T12AB62922B1F200AAC59D9071CF469735E7E23C698FF183E7B145B2D92F325D0763A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry