General
- Target 2026-08-07_2e3bd78480e93b77e53695381eff0917_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry
- Size 6.3MB
- Sample260808-b2qa9afn2z
- SHA256 3348c1b476323b19e0191bf4a4e17e352d95f512b4a752fcfea5c93724fd790c
- MD5 2e3bd78480e93b77e53695381eff0917
- SHA1 fe6fbee00cb91434d6bc93c754a5fa16a38a8b47
- SHA512 5b2687dc45ee61086e82f302a000ce3e4054906a8959527f5e88724e7771c9dba887181d32b47332303a4945ecc10f6e733fe9334ed0bfbe822ec66672b068d8
- SSDEEP 98304:nu5x6M1WoDDklJ6qdu5x6M1WoDDklJ6qY:Qi8kLUi8kL+
- TLSH T19A668E42F6E4007AE16E4A34D7769632AA77BC460B51D7CF56D0F62E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_2e3bd78480e93b77e53695381eff0917_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_2e3bd78480e93b77e53695381eff0917_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_2e3bd78480e93b77e53695381eff0917_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry
- Size 6.3MB
- SHA256 3348c1b476323b19e0191bf4a4e17e352d95f512b4a752fcfea5c93724fd790c
- MD5 2e3bd78480e93b77e53695381eff0917
- SHA1 fe6fbee00cb91434d6bc93c754a5fa16a38a8b47
- SHA512 5b2687dc45ee61086e82f302a000ce3e4054906a8959527f5e88724e7771c9dba887181d32b47332303a4945ecc10f6e733fe9334ed0bfbe822ec66672b068d8
- SSDEEP 98304:nu5x6M1WoDDklJ6qdu5x6M1WoDDklJ6qY:Qi8kLUi8kL+
- TLSH T19A668E42F6E4007AE16E4A34D7769632AA77BC460B51D7CF56D0F62E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry