General
- Target 2026-08-15_ef81d24719c68a55bc87401837763d02_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 13.0MB
- Sample260815-knxylsseph
- SHA256 dbec47719f0746288ededbad8e7dbd134f345017fd991ad103f6a2fa541a9403
- MD5 ef81d24719c68a55bc87401837763d02
- SHA1 2a5e1f6d7b787c0dc35c4ba75720abb182602388
- SHA512 0e553e81efd1b9ff6d457a9c72077a81d22b1a56254eeb19e4f2bc642967e1a952c375c551cc41e564fd679c98187f7081af6f79b97b105ce3bf78051f70eb36
- SSDEEP 196608:JtcI4/h1+QtcI4/h1+FdtcI4/h1+QtcI4/h1+F+C/h1+:IEUUEU+
- TLSH T1DAD63922B1E14065C1A99031CF96973597E23C698FF1C7E7B205B7D82F725C07A3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_ef81d24719c68a55bc87401837763d02_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_ef81d24719c68a55bc87401837763d02_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_ef81d24719c68a55bc87401837763d02_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 13.0MB
- SHA256 dbec47719f0746288ededbad8e7dbd134f345017fd991ad103f6a2fa541a9403
- MD5 ef81d24719c68a55bc87401837763d02
- SHA1 2a5e1f6d7b787c0dc35c4ba75720abb182602388
- SHA512 0e553e81efd1b9ff6d457a9c72077a81d22b1a56254eeb19e4f2bc642967e1a952c375c551cc41e564fd679c98187f7081af6f79b97b105ce3bf78051f70eb36
- SSDEEP 196608:JtcI4/h1+QtcI4/h1+FdtcI4/h1+QtcI4/h1+F+C/h1+:IEUUEU+
- TLSH T1DAD63922B1E14065C1A99031CF96973597E23C698FF1C7E7B205B7D82F725C07A3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry