General
- Target 2026-08-06_5f4a9d59c0731af2def838dcb877a20f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 35.9MB
- Sample260806-ygcwrazaph
- SHA256 ff4e4c506c08f985a2f2580d012bf7f1a2e56ac6359418e1f65c057190c8d27b
- MD5 5f4a9d59c0731af2def838dcb877a20f
- SHA1 4a37fb6ada873fabb8d3d659be992088d80e87e1
- SHA512 352ad04844889d30398df6a0b85981fad645b762272aaaac62d962665ed9fc49ea4d3810a3ce0fc51d911bc1e0ec5f1efb0454e9df3ce3c3540ea4a9157ddaef
- SSDEEP 786432:zyZ/K0ttYZTEqoyZ/K0ttYZTEqDyZ/K0ttYZTEqoyZ/K0ttYZTEq3:uZ/K0ttYREqDZ/K0ttYREq+Z/K0ttYRK
- TLSH T127876B13F1A541A9E06AD174CF668231DB727C594BF1A6EF3240B6D42E33AD07B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_5f4a9d59c0731af2def838dcb877a20f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_5f4a9d59c0731af2def838dcb877a20f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_5f4a9d59c0731af2def838dcb877a20f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 35.9MB
- SHA256 ff4e4c506c08f985a2f2580d012bf7f1a2e56ac6359418e1f65c057190c8d27b
- MD5 5f4a9d59c0731af2def838dcb877a20f
- SHA1 4a37fb6ada873fabb8d3d659be992088d80e87e1
- SHA512 352ad04844889d30398df6a0b85981fad645b762272aaaac62d962665ed9fc49ea4d3810a3ce0fc51d911bc1e0ec5f1efb0454e9df3ce3c3540ea4a9157ddaef
- SSDEEP 786432:zyZ/K0ttYZTEqoyZ/K0ttYZTEqDyZ/K0ttYZTEqoyZ/K0ttYZTEq3:uZ/K0ttYREqDZ/K0ttYREq+Z/K0ttYRK
- TLSH T127876B13F1A541A9E06AD174CF668231DB727C594BF1A6EF3240B6D42E33AD07B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application