General
- Target 2026-08-09_8b46db0637ca87c880ec80a14dc725a7_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- Sample260809-twdz5sbd25
- SHA256 77540874efdf3d1e7998015ef4f63265eec7aa654dfa7a7330da62b820716550
- MD5 8b46db0637ca87c880ec80a14dc725a7
- SHA1 8498e8ce63a3eb280893c29019c7279fecbd4810
- SHA512 aec3a2e14b189e66cd5520f0dc52e08d576c791c262dfe36f8c13b4f66d9ab5a34930e73176ebeaa94ada2604fa20e35ea324ab31bdcb14f00a2eb37319fcc33
- SSDEEP 12288:GaoVmp+84YOE+66uTHJ/J+kvvcLIb1M/Bo0lBM1iuWXW:GDVmpzKwxx+1L6goYq1iuWXW
- TLSH T133D46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_8b46db0637ca87c880ec80a14dc725a7_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_8b46db0637ca87c880ec80a14dc725a7_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_8b46db0637ca87c880ec80a14dc725a7_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- SHA256 77540874efdf3d1e7998015ef4f63265eec7aa654dfa7a7330da62b820716550
- MD5 8b46db0637ca87c880ec80a14dc725a7
- SHA1 8498e8ce63a3eb280893c29019c7279fecbd4810
- SHA512 aec3a2e14b189e66cd5520f0dc52e08d576c791c262dfe36f8c13b4f66d9ab5a34930e73176ebeaa94ada2604fa20e35ea324ab31bdcb14f00a2eb37319fcc33
- SSDEEP 12288:GaoVmp+84YOE+66uTHJ/J+kvvcLIb1M/Bo0lBM1iuWXW:GDVmpzKwxx+1L6goYq1iuWXW
- TLSH T133D46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory