General
- Target 2026-08-07_ff75266316c0fc235b13ce371596fc7b_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry
- Size 6.2MB
- Sample260808-anvhdayycs
- SHA256 de7ef4a7ea7d297e671550a6fec5cdef36215fd4254b7268eb8991175868ea58
- MD5 ff75266316c0fc235b13ce371596fc7b
- SHA1 96bdba49cef26b2ec8c954a55d453788c24d1ccf
- SHA512 3e61497ac30731f70818cb415e3064e4ca2bc42ecd26011bbf327fb27e1461ba26b89b0d712df314529fb227df09a558ace3b5f767f9fd409bb23b012db7a174
- SSDEEP 98304:nu5x6M1WoDDklJ6qdu5x6M1WoDDklJ6qGD:Qi8kLUi8kLMD
- TLSH T132669F42B7E4007EF17E4A3496769632AA76BC460B11DBCF56D4F61E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_ff75266316c0fc235b13ce371596fc7b_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_ff75266316c0fc235b13ce371596fc7b_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_ff75266316c0fc235b13ce371596fc7b_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry
- Size 6.2MB
- SHA256 de7ef4a7ea7d297e671550a6fec5cdef36215fd4254b7268eb8991175868ea58
- MD5 ff75266316c0fc235b13ce371596fc7b
- SHA1 96bdba49cef26b2ec8c954a55d453788c24d1ccf
- SHA512 3e61497ac30731f70818cb415e3064e4ca2bc42ecd26011bbf327fb27e1461ba26b89b0d712df314529fb227df09a558ace3b5f767f9fd409bb23b012db7a174
- SSDEEP 98304:nu5x6M1WoDDklJ6qdu5x6M1WoDDklJ6qGD:Qi8kLUi8kLMD
- TLSH T132669F42B7E4007EF17E4A3496769632AA76BC460B11DBCF56D4F61E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry