General
- Target 2026-08-12_f13a32da7eeb84f7ada0ed5657b57531_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 4.8MB
- Sample260812-hvpvgaxyhz
- SHA256 562a805bc1203fa8c09a5ef373af50cada796bc4d24b48ab92b5b31227ab3a8a
- MD5 f13a32da7eeb84f7ada0ed5657b57531
- SHA1 50544eb07b099bbe43ed31c5d633480eee65757a
- SHA512 2cad4f2d0546a0d6f880d16e61a0497c4773614ca73bd2eca144cb3a25de11d0a8d735f1ef98ddcab81baa65c7fb7ea50d1277695b12c9c06c37e3737ba3cbc0
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftC1/h1+:JSWyZ/K0ttYVAA1/h1+
- TLSH T1A8367C13F59541E9D06AC079CF869332EB32784907F1A6DF265097E52E37AE0BB39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_f13a32da7eeb84f7ada0ed5657b57531_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_f13a32da7eeb84f7ada0ed5657b57531_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_f13a32da7eeb84f7ada0ed5657b57531_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 4.8MB
- SHA256 562a805bc1203fa8c09a5ef373af50cada796bc4d24b48ab92b5b31227ab3a8a
- MD5 f13a32da7eeb84f7ada0ed5657b57531
- SHA1 50544eb07b099bbe43ed31c5d633480eee65757a
- SHA512 2cad4f2d0546a0d6f880d16e61a0497c4773614ca73bd2eca144cb3a25de11d0a8d735f1ef98ddcab81baa65c7fb7ea50d1277695b12c9c06c37e3737ba3cbc0
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftC1/h1+:JSWyZ/K0ttYVAA1/h1+
- TLSH T1A8367C13F59541E9D06AC079CF869332EB32784907F1A6DF265097E52E37AE0BB39720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry