General
- Target 2026-08-10_758b9ea1a90abf3a2f5e2457231afd16_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 18.6MB
- Sample260810-q2stpsam4v
- SHA256 52f480f8559fd4e329e15b74cdb1c54c3a7a94fbc7253bd5711d07d65fe1088a
- MD5 758b9ea1a90abf3a2f5e2457231afd16
- SHA1 3a4b8af9601acf60642b8db5e9e143777706fc9d
- SHA512 bfef67cf21555a728e487be0a464bc3797f8dea3a8e0f6f7357ae34509cc2d968968aae1017a05524e15e0591d177a4308a70035f5af43913ea968894f18d7f5
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0B0SWyZ/K0ttYVAAT1Kmd0Bsly:zyZ/K0ttYZTEqlyZ/K0ttYZTEqTl
- TLSH T128177D03F1A541E9E0AAD174CE669631EB327C494BF1A5EF3240B6D42E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_758b9ea1a90abf3a2f5e2457231afd16_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_758b9ea1a90abf3a2f5e2457231afd16_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_758b9ea1a90abf3a2f5e2457231afd16_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 18.6MB
- SHA256 52f480f8559fd4e329e15b74cdb1c54c3a7a94fbc7253bd5711d07d65fe1088a
- MD5 758b9ea1a90abf3a2f5e2457231afd16
- SHA1 3a4b8af9601acf60642b8db5e9e143777706fc9d
- SHA512 bfef67cf21555a728e487be0a464bc3797f8dea3a8e0f6f7357ae34509cc2d968968aae1017a05524e15e0591d177a4308a70035f5af43913ea968894f18d7f5
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0B0SWyZ/K0ttYVAAT1Kmd0Bsly:zyZ/K0ttYZTEqlyZ/K0ttYZTEqTl
- TLSH T128177D03F1A541E9E0AAD174CE669631EB327C494BF1A5EF3240B6D42E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application