General
- Target 2026-08-09_b4d2dbc04e263bbe21305bde8b11c387_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 8.7MB
- Sample260809-ww9g6abp2w
- SHA256 fd78d23a5fc83a194f2365b49e4db89cc20b520de1bf199e5bb6452b3964e8a3
- MD5 b4d2dbc04e263bbe21305bde8b11c387
- SHA1 7b5f0a6948cf35ec066e7df1b4168da68acd3170
- SHA512 730e70dacf6e746f3a485ce7a1768b6fbcef9452d43b03c4e9e4eb19b6348e3744604c506c23a0d8c625229c2587068fdb31a391cc60763392a22c67766f117b
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnpsezSC6v2XMH4b:JSWyZ/K0ttYVAAT1Kmd0BBb
- TLSH T13D967D03F1A841E9E0AAD174CE669631EB327C494BF165EF3240B6D42E37AD07B39725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_b4d2dbc04e263bbe21305bde8b11c387_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_b4d2dbc04e263bbe21305bde8b11c387_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_b4d2dbc04e263bbe21305bde8b11c387_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 8.7MB
- SHA256 fd78d23a5fc83a194f2365b49e4db89cc20b520de1bf199e5bb6452b3964e8a3
- MD5 b4d2dbc04e263bbe21305bde8b11c387
- SHA1 7b5f0a6948cf35ec066e7df1b4168da68acd3170
- SHA512 730e70dacf6e746f3a485ce7a1768b6fbcef9452d43b03c4e9e4eb19b6348e3744604c506c23a0d8c625229c2587068fdb31a391cc60763392a22c67766f117b
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnpsezSC6v2XMH4b:JSWyZ/K0ttYVAAT1Kmd0BBb
- TLSH T13D967D03F1A841E9E0AAD174CE669631EB327C494BF165EF3240B6D42E37AD07B39725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry