General
- Target 2026-08-06_f8727ced784fdf7528ef27526758d2ad_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 15.6MB
- Sample260806-xp7knassfy
- SHA256 55a14dc544daad5f46758228f75b75b41b541cea7d3281446c44b6aa36406c76
- MD5 f8727ced784fdf7528ef27526758d2ad
- SHA1 0fbfb72a4b5f570c0fe52ff2e844a0d9d021e944
- SHA512 cc35bb061a3136a179203cc36ec09a9f8db944003365515a11a34951b42e9441181cfdb7261f2cbc12c8202391c6628e038c7a396f0ac5ed11f792e50ca334c4
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6q7GgHIKgM/u5x6M1WoDDklJ6qCu5x6M1B:Qi8kLri8kL5oKmi8kLri8kL5oKyv
- TLSH T1EDF69F03B7D400B9E16E863496769632EA72BC461B21D6CF5794F61E2E73BC09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_f8727ced784fdf7528ef27526758d2ad_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_f8727ced784fdf7528ef27526758d2ad_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_f8727ced784fdf7528ef27526758d2ad_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 15.6MB
- SHA256 55a14dc544daad5f46758228f75b75b41b541cea7d3281446c44b6aa36406c76
- MD5 f8727ced784fdf7528ef27526758d2ad
- SHA1 0fbfb72a4b5f570c0fe52ff2e844a0d9d021e944
- SHA512 cc35bb061a3136a179203cc36ec09a9f8db944003365515a11a34951b42e9441181cfdb7261f2cbc12c8202391c6628e038c7a396f0ac5ed11f792e50ca334c4
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6q7GgHIKgM/u5x6M1WoDDklJ6qCu5x6M1B:Qi8kLri8kL5oKmi8kLri8kL5oKyv
- TLSH T1EDF69F03B7D400B9E16E863496769632EA72BC461B21D6CF5794F61E2E73BC09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry