General
- Target 2026-08-09_b87d51950113080ffa8e7736a863cbc7_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 6.7MB
- Sample260809-q22rlsfq6w
- SHA256 07f79ef7f6a49fe617683a26b8c4a6170fcfaaa8aa0edaaa9249b836a9d684ac
- MD5 b87d51950113080ffa8e7736a863cbc7
- SHA1 bfc0432b9cbab327f40a7ef8ac4865de042650e3
- SHA512 eec162843ee8caec5af31cf2260655a4bbffe8bcd48abe9bba0894a69f0f232723cac864efc35255cd45746d9896f849d2343acca7d2d71f800c06f50fedb18b
- SSDEEP 98304:Su5x6M1pLapIyQvGAdlCEL8c/bRNw5CDCK:JtcIDvyEYc/b3w8mK
- TLSH T1ED6649217AE540E5D1AA9034CF668632E7B27C164FF1979B1241F6DE2F335C03E2972A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_b87d51950113080ffa8e7736a863cbc7_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_b87d51950113080ffa8e7736a863cbc7_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_b87d51950113080ffa8e7736a863cbc7_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 6.7MB
- SHA256 07f79ef7f6a49fe617683a26b8c4a6170fcfaaa8aa0edaaa9249b836a9d684ac
- MD5 b87d51950113080ffa8e7736a863cbc7
- SHA1 bfc0432b9cbab327f40a7ef8ac4865de042650e3
- SHA512 eec162843ee8caec5af31cf2260655a4bbffe8bcd48abe9bba0894a69f0f232723cac864efc35255cd45746d9896f849d2343acca7d2d71f800c06f50fedb18b
- SSDEEP 98304:Su5x6M1pLapIyQvGAdlCEL8c/bRNw5CDCK:JtcIDvyEYc/b3w8mK
- TLSH T1ED6649217AE540E5D1AA9034CF668632E7B27C164FF1979B1241F6DE2F335C03E2972A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry