General
- Target 2026-08-09_86dd5be111015bede0d71be2c5dbf536_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 12.8MB
- Sample260809-txm97shr9w
- SHA256 013ed617d2c7e8e0cb283300ff09a3ec0588d9fa714c6be0db077867846eb88e
- MD5 86dd5be111015bede0d71be2c5dbf536
- SHA1 7988cf30117ea23ec861fe62b3845f9a8d5fc68e
- SHA512 f39efeaf070e6a8a6c482281cefd9f6d6bc1db69bb9de945b97784520905d208debb570070c16fa98923cb6844e89655ddc2ebdcac278c53e28cfebe90c89a27
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0B7vyEYc/b3w8O:zyZ/K0ttYZTEq0vyEYKbi
- TLSH T11AD66C13B6A840E5E0A6D134CE668631EB727C464BF1A6DF2240F6D92F336D07E39725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_86dd5be111015bede0d71be2c5dbf536_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_86dd5be111015bede0d71be2c5dbf536_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_86dd5be111015bede0d71be2c5dbf536_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 12.8MB
- SHA256 013ed617d2c7e8e0cb283300ff09a3ec0588d9fa714c6be0db077867846eb88e
- MD5 86dd5be111015bede0d71be2c5dbf536
- SHA1 7988cf30117ea23ec861fe62b3845f9a8d5fc68e
- SHA512 f39efeaf070e6a8a6c482281cefd9f6d6bc1db69bb9de945b97784520905d208debb570070c16fa98923cb6844e89655ddc2ebdcac278c53e28cfebe90c89a27
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0B7vyEYc/b3w8O:zyZ/K0ttYZTEq0vyEYKbi
- TLSH T11AD66C13B6A840E5E0A6D134CE668631EB727C464BF1A6DF2240F6D92F336D07E39725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry