General
- Target 2026-08-08_2077cfdd7e0612e709088d8db7edae6e_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 11.0MB
- Sample260808-txbleavtay
- SHA256 ae74d7a7755a17c5d40cf45df1af3e2adfb59dfd835093d36bbb68ee04306710
- MD5 2077cfdd7e0612e709088d8db7edae6e
- SHA1 acff2a89900489310b129118fc440d4f1304f1f7
- SHA512 ffd7754f76d1938f11172a88f020bdb60d807b2a66a164c48db7dd5718cdcc9a954d04ab816cec755f42db254da053bcc9e76d27acac1c454fe1106459d7be60
- SSDEEP 196608:Qi8PvyEYc/b3w8PWyZ/K0ttYVAAT3/h1+:IPvyEYKbayZ/K0ttYZT
- TLSH T11BC67E13B6E440F5E06AD174CA768632EB727C464BB1A6DF1240F69E2F336D06E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_2077cfdd7e0612e709088d8db7edae6e_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_2077cfdd7e0612e709088d8db7edae6e_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_2077cfdd7e0612e709088d8db7edae6e_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 11.0MB
- SHA256 ae74d7a7755a17c5d40cf45df1af3e2adfb59dfd835093d36bbb68ee04306710
- MD5 2077cfdd7e0612e709088d8db7edae6e
- SHA1 acff2a89900489310b129118fc440d4f1304f1f7
- SHA512 ffd7754f76d1938f11172a88f020bdb60d807b2a66a164c48db7dd5718cdcc9a954d04ab816cec755f42db254da053bcc9e76d27acac1c454fe1106459d7be60
- SSDEEP 196608:Qi8PvyEYc/b3w8PWyZ/K0ttYVAAT3/h1+:IPvyEYKbayZ/K0ttYZT
- TLSH T11BC67E13B6E440F5E06AD174CA768632EB727C464BB1A6DF1240F69E2F336D06E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry