General
- Target 2026-08-13_59c20af3ee03ea9caadff43550531450_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 3.6MB
- Sample260813-lj4e9saa26
- SHA256 368e207520f37041f2ffabe8e9fc5c5bcb590df7d8f4d56b1624e63fba50368d
- MD5 59c20af3ee03ea9caadff43550531450
- SHA1 85c2d93b4cdc1b4370bb20a18b4fedf327543c35
- SHA512 0b8f0365b416e30ed68b427aff8e244a764254f8c24a16a144fe5018f3f06933a79a3719cf7d1b1c0c24c359f19d5481dac868a6e59598a471afda383f452c50
- SSDEEP 49152:tYRw5x6M1WoMCxfSSgjI45TMwwapIgT/Pji0Aj:Su5x6M1WoDMoLapICjo
- TLSH T1B9064A22B1E10066C1AE8031CF569735D7E17C698BF1C7E7B245B2D92F726C07A3A71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_59c20af3ee03ea9caadff43550531450_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_59c20af3ee03ea9caadff43550531450_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_59c20af3ee03ea9caadff43550531450_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 3.6MB
- SHA256 368e207520f37041f2ffabe8e9fc5c5bcb590df7d8f4d56b1624e63fba50368d
- MD5 59c20af3ee03ea9caadff43550531450
- SHA1 85c2d93b4cdc1b4370bb20a18b4fedf327543c35
- SHA512 0b8f0365b416e30ed68b427aff8e244a764254f8c24a16a144fe5018f3f06933a79a3719cf7d1b1c0c24c359f19d5481dac868a6e59598a471afda383f452c50
- SSDEEP 49152:tYRw5x6M1WoMCxfSSgjI45TMwwapIgT/Pji0Aj:Su5x6M1WoDMoLapICjo
- TLSH T1B9064A22B1E10066C1AE8031CF569735D7E17C698BF1C7E7B245B2D92F726C07A3A71A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry