General
- Target 2026-08-07_c284f6a1973bc18486c0f57e82719e08_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry
- Size 6.2MB
- Sample260808-a2bbnawfpc
- SHA256 9c80b8e27710c6032da9bbbf1708121ed7a37c377c54affc25192c758fe66856
- MD5 c284f6a1973bc18486c0f57e82719e08
- SHA1 2f7f3e4023384331bdfffead6a6779c8f07d86a1
- SHA512 32bae63111ea93c3515cac07c9acfeff61849f99c74c3c7ef4fe577c030a482fea55eda6e91b7fe018e234b9c37694351de0f4c16fa65b6523b453d896fbd659
- SSDEEP 98304:nu5x6M1WoDDklJ6qdu5x6M1WoDDklJ6qUj:Qi8kLUi8kLWj
- TLSH T16F669F42B7E4007EF17E4A3496769632AA76BC460B11DBCF56D4F61E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_c284f6a1973bc18486c0f57e82719e08_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_c284f6a1973bc18486c0f57e82719e08_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_c284f6a1973bc18486c0f57e82719e08_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry
- Size 6.2MB
- SHA256 9c80b8e27710c6032da9bbbf1708121ed7a37c377c54affc25192c758fe66856
- MD5 c284f6a1973bc18486c0f57e82719e08
- SHA1 2f7f3e4023384331bdfffead6a6779c8f07d86a1
- SHA512 32bae63111ea93c3515cac07c9acfeff61849f99c74c3c7ef4fe577c030a482fea55eda6e91b7fe018e234b9c37694351de0f4c16fa65b6523b453d896fbd659
- SSDEEP 98304:nu5x6M1WoDDklJ6qdu5x6M1WoDDklJ6qUj:Qi8kLUi8kLWj
- TLSH T16F669F42B7E4007EF17E4A3496769632AA76BC460B11DBCF56D4F61E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry