General
- Target 2026-08-12_2f860af139df8800421f2d0bb3cbd19f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 17.5MB
- Sample260812-r5yd2axtdx
- SHA256 fbf9fd10d6e2d486d4c6065789a386519f68b4548d84a169e267cfb1b481bba4
- MD5 2f860af139df8800421f2d0bb3cbd19f
- SHA1 163115669b8540f28042f8d648031797675adbae
- SHA512 9c47a5890de895cf32c8794a6864761705bb1cb604df2becd7bc62831249423da5f82c8fc3a6c5819450d909c9f6b7ded6543794cdc29586c1a31614e524016f
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qu0oAaldmdmnpGu5x6M1WoDDklJ6qCu5F:Qi8kLri8kLVKmd0vi8kLri8kLVKmd0v
- TLSH T17F078E03B6D404A9E16A8534DA669631DB72BC4907F1D6DF2690F6DA2E33BC07B35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_2f860af139df8800421f2d0bb3cbd19f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_2f860af139df8800421f2d0bb3cbd19f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_2f860af139df8800421f2d0bb3cbd19f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 17.5MB
- SHA256 fbf9fd10d6e2d486d4c6065789a386519f68b4548d84a169e267cfb1b481bba4
- MD5 2f860af139df8800421f2d0bb3cbd19f
- SHA1 163115669b8540f28042f8d648031797675adbae
- SHA512 9c47a5890de895cf32c8794a6864761705bb1cb604df2becd7bc62831249423da5f82c8fc3a6c5819450d909c9f6b7ded6543794cdc29586c1a31614e524016f
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qu0oAaldmdmnpGu5x6M1WoDDklJ6qCu5F:Qi8kLri8kLVKmd0vi8kLri8kLVKmd0v
- TLSH T17F078E03B6D404A9E16A8534DA669631DB72BC4907F1D6DF2690F6DA2E33BC07B35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application