General
- Target 2026-08-13_8eb4861a2fd0fefeb75602771abd9724_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 36.2MB
- Sample260813-krc3lsvsdv
- SHA256 0032e609c7f0512913af5c4e35ccfe9654e0c4d1a509351f67f7654d8e39a68c
- MD5 8eb4861a2fd0fefeb75602771abd9724
- SHA1 bc38a22b1863f4542cec9c441956af1a3cb2ddc7
- SHA512 2ac93a0c9b9026902fc673f3a270a26979898632537d404b7ebdd3e0d371427f54914edac587868f321182c00aa0a2942f3c4db0f5f389d51be548ee395d222f
- SSDEEP 393216:IkLDkL5ovkLDkL5o/8kLDkL5ovkLDkL5o/4K:IkLDkLevkLDkLekkLDkLevkLDkLez
- TLSH T11C879F03B6E501A9E06E853497669632EA72BC460B21D7CF5690F61E2F73BD09F35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_8eb4861a2fd0fefeb75602771abd9724_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_8eb4861a2fd0fefeb75602771abd9724_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_8eb4861a2fd0fefeb75602771abd9724_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 36.2MB
- SHA256 0032e609c7f0512913af5c4e35ccfe9654e0c4d1a509351f67f7654d8e39a68c
- MD5 8eb4861a2fd0fefeb75602771abd9724
- SHA1 bc38a22b1863f4542cec9c441956af1a3cb2ddc7
- SHA512 2ac93a0c9b9026902fc673f3a270a26979898632537d404b7ebdd3e0d371427f54914edac587868f321182c00aa0a2942f3c4db0f5f389d51be548ee395d222f
- SSDEEP 393216:IkLDkL5ovkLDkL5o/8kLDkL5ovkLDkL5o/4K:IkLDkLevkLDkLekkLDkLevkLDkLez
- TLSH T11C879F03B6E501A9E06E853497669632EA72BC460B21D7CF5690F61E2F73BD09F35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry