General
- Target 2026-08-14_b9a81e84986557847c83749dd2183ffd_amadey_cobalt-strike_elex_emotet_remcos_vidar_wannacry
- Size 2.0MB
- Sample260814-24btratdkb
- SHA256 e37c6ee6ad55b72447fd3ce884bca7f4359c0d17680601c55d236defc4772117
- MD5 b9a81e84986557847c83749dd2183ffd
- SHA1 0cd97cc548b7689d1f23f4d3fefdf40af0faf72d
- SHA512 ace8db6422face6558b56977e90ff6717817df333abc3fc03eec79212e4e4b934397d76e57e3c234e515f1f93c38e9859afa666d296f4d6d670d2503e4132d37
- SSDEEP 24576:tEBDRGo4x5x6YXuquvQ0Le5ji0hmxNrMB0Le5ji0hmxNrMUqa:tYRw5x6M1XPji0Aj+Pji0Aj
- TLSH T163A56C55F5A48372D072C075C4D6A7BAEE7278821B308BCB4356DB6C2E276D18A37732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_b9a81e84986557847c83749dd2183ffd_amadey_cobalt-strike_elex_emotet_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_b9a81e84986557847c83749dd2183ffd_amadey_cobalt-strike_elex_emotet_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_b9a81e84986557847c83749dd2183ffd_amadey_cobalt-strike_elex_emotet_remcos_vidar_wannacry
- Size 2.0MB
- SHA256 e37c6ee6ad55b72447fd3ce884bca7f4359c0d17680601c55d236defc4772117
- MD5 b9a81e84986557847c83749dd2183ffd
- SHA1 0cd97cc548b7689d1f23f4d3fefdf40af0faf72d
- SHA512 ace8db6422face6558b56977e90ff6717817df333abc3fc03eec79212e4e4b934397d76e57e3c234e515f1f93c38e9859afa666d296f4d6d670d2503e4132d37
- SSDEEP 24576:tEBDRGo4x5x6YXuquvQ0Le5ji0hmxNrMB0Le5ji0hmxNrMUqa:tYRw5x6M1XPji0Aj+Pji0Aj
- TLSH T163A56C55F5A48372D072C075C4D6A7BAEE7278821B308BCB4356DB6C2E276D18A37732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry