General
- Target 2026-08-15_985f12cb579086463dc3e07d904e2e1c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 6.9MB
- Sample260815-k4msksshkc
- SHA256 f3a44f6ec7bf41d4ff17968b55ec0b8b2e6383f0b2bbbe568bc0e23bc9db61d3
- MD5 985f12cb579086463dc3e07d904e2e1c
- SHA1 39404aac92483c515eedc36b135fba038af864b9
- SHA512 b518c169445e9fc31c83681f911625b2085b9a5d63702e101f39e87af17227c58f071d02d6cc40ecd3ab6bf84b04448f8f1ae985df4a6c979727a97f53f39bba
- SSDEEP 98304:Su5x6M1pLapI4/h1+nu5x6M1pLapI4/h1+FE6/h1+:JtcI4/h1+QtcI4/h1+FE6/h1+
- TLSH T106763A22B1E14165C1A98031CF969735D7F23C698BF187E7A205B7D82F736C07A3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_985f12cb579086463dc3e07d904e2e1c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_985f12cb579086463dc3e07d904e2e1c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_985f12cb579086463dc3e07d904e2e1c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 6.9MB
- SHA256 f3a44f6ec7bf41d4ff17968b55ec0b8b2e6383f0b2bbbe568bc0e23bc9db61d3
- MD5 985f12cb579086463dc3e07d904e2e1c
- SHA1 39404aac92483c515eedc36b135fba038af864b9
- SHA512 b518c169445e9fc31c83681f911625b2085b9a5d63702e101f39e87af17227c58f071d02d6cc40ecd3ab6bf84b04448f8f1ae985df4a6c979727a97f53f39bba
- SSDEEP 98304:Su5x6M1pLapI4/h1+nu5x6M1pLapI4/h1+FE6/h1+:JtcI4/h1+QtcI4/h1+FE6/h1+
- TLSH T106763A22B1E14165C1A98031CF969735D7F23C698BF187E7A205B7D82F736C07A3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry