General
- Target 2026-08-10_e83d38561b167dd284b640e213b5d550_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar
- Size 23.1MB
- Sample260810-gfmacssbmb
- SHA256 d281deac5f57be2e42bf0b3244a8339478664a9e95d482480c18550a2554a265
- MD5 e83d38561b167dd284b640e213b5d550
- SHA1 354088b79e8676e36a08c284067799088c3ac49e
- SHA512 66ce0346e25b132f218ede263dcf49b701c61204d0369679126632083f7b051b8c5638109ed942da7eb5c4aa24264d1a5a0cfe66d33c2714f77940ef6ff99f9f
- SSDEEP 196608:Qi8kLri8kLPi8kLri8kL3ci8kLri8kLPi8kLri8kL3ki/h1+:IkLDkLHkLDkL3EkLDkLHkLDkL3k
- TLSH T124379E42B7E4407EF1BB4A30957696369A76BD820B11CBCF56D4F61E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_e83d38561b167dd284b640e213b5d550_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_e83d38561b167dd284b640e213b5d550_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_e83d38561b167dd284b640e213b5d550_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar
- Size 23.1MB
- SHA256 d281deac5f57be2e42bf0b3244a8339478664a9e95d482480c18550a2554a265
- MD5 e83d38561b167dd284b640e213b5d550
- SHA1 354088b79e8676e36a08c284067799088c3ac49e
- SHA512 66ce0346e25b132f218ede263dcf49b701c61204d0369679126632083f7b051b8c5638109ed942da7eb5c4aa24264d1a5a0cfe66d33c2714f77940ef6ff99f9f
- SSDEEP 196608:Qi8kLri8kLPi8kLri8kL3ci8kLri8kLPi8kLri8kL3ki/h1+:IkLDkLHkLDkL3EkLDkLHkLDkL3k
- TLSH T124379E42B7E4407EF1BB4A30957696369A76BD820B11CBCF56D4F61E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry