General
- Target 2026-08-13_f0064a387cad22c8d731984c91f18f21_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 21.2MB
- Sample260813-ddgejsyvb1
- SHA256 a728d0fccf268f9ea85c0e018c186e440107b726a4b24c22eff6d3f335621965
- MD5 f0064a387cad22c8d731984c91f18f21
- SHA1 d37f6c7fe031a51fb05a8f52f7c43327efc2ff0a
- SHA512 f122d3c4679871b568da0a5c3be9a91765d6bdf58a167c3912dc0193fe8e6a6a8e47b302e7b5e62324ec24cea59b70926d60d0bca55851dbb7069121955d018b
- SSDEEP 393216:zyZ/K0ttYZTayZ/K0ttYZT5yZ/K0ttYZTayZ/K0ttYZT:zyZ/K0ttYZTayZ/K0ttYZT5yZ/K0ttYE
- TLSH T17A276C03F2E540E9E0AAD174CE7697319B32BC5A8BF1A5DF224076D41E76AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_f0064a387cad22c8d731984c91f18f21_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_f0064a387cad22c8d731984c91f18f21_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_f0064a387cad22c8d731984c91f18f21_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 21.2MB
- SHA256 a728d0fccf268f9ea85c0e018c186e440107b726a4b24c22eff6d3f335621965
- MD5 f0064a387cad22c8d731984c91f18f21
- SHA1 d37f6c7fe031a51fb05a8f52f7c43327efc2ff0a
- SHA512 f122d3c4679871b568da0a5c3be9a91765d6bdf58a167c3912dc0193fe8e6a6a8e47b302e7b5e62324ec24cea59b70926d60d0bca55851dbb7069121955d018b
- SSDEEP 393216:zyZ/K0ttYZTayZ/K0ttYZT5yZ/K0ttYZTayZ/K0ttYZT:zyZ/K0ttYZTayZ/K0ttYZT5yZ/K0ttYE
- TLSH T17A276C03F2E540E9E0AAD174CE7697319B32BC5A8BF1A5DF224076D41E76AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry