General
- Target 2026-08-11_d909a7fac67cd8d613bc49034c0ab3e0_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 18.4MB
- Sample260811-13mn7aztev
- SHA256 4962ce5bc55cd1ffe926944425369837d2f05a97c14167ce9aeb5b85529049a6
- MD5 d909a7fac67cd8d613bc49034c0ab3e0
- SHA1 3ce6dbfabca7cd4b92078c1c3ebb02dcd8055a51
- SHA512 94844fcff6cece491dbb5457d1855624cb627feb0fd20032d0e0a88d2674d8c6e8ad6d44ea7aa8aeb22e0251a782240054e619957470c2e745add99f52cb074f
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+fYSWyZ/K0ttYVAAT1Kmd0x/h1+foAL:zyZ/K0ttYZTEqoyZ/K0ttYZTEqKo
- TLSH T152177D13F2A441E9E06AD174CE669231DB327C494BF1A6EF3240B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_d909a7fac67cd8d613bc49034c0ab3e0_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_d909a7fac67cd8d613bc49034c0ab3e0_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_d909a7fac67cd8d613bc49034c0ab3e0_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 18.4MB
- SHA256 4962ce5bc55cd1ffe926944425369837d2f05a97c14167ce9aeb5b85529049a6
- MD5 d909a7fac67cd8d613bc49034c0ab3e0
- SHA1 3ce6dbfabca7cd4b92078c1c3ebb02dcd8055a51
- SHA512 94844fcff6cece491dbb5457d1855624cb627feb0fd20032d0e0a88d2674d8c6e8ad6d44ea7aa8aeb22e0251a782240054e619957470c2e745add99f52cb074f
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+fYSWyZ/K0ttYVAAT1Kmd0x/h1+foAL:zyZ/K0ttYZTEqoyZ/K0ttYZTEqKo
- TLSH T152177D13F2A441E9E06AD174CE669231DB327C494BF1A6EF3240B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry