General
- Target 2026-08-15_5c7a7e719e28f2806ee8c5d9f9a65644_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 13.0MB
- Sample260815-ldws8starb
- SHA256 9d6c2bd6e54ad03749da9e2609d3a1f14631ec43782b8fa215777986c7903443
- MD5 5c7a7e719e28f2806ee8c5d9f9a65644
- SHA1 939799601d519ff6f00f0d706f51ccda69649a59
- SHA512 a9ccad60f5ea2e93fedbd8854dcf959018a0c64e0186483a1390f5d3251a783a5d1edbac0f283af5cab568f22dcbc95940ea94284796f8eb043323b1d8171f50
- SSDEEP 196608:JtcI4/h1+QtcI4/h1+FdtcI4/h1+QtcI4/h1+FRw8:IEUUEURw8
- TLSH T13AD65B22B1E14065C1A99031CF86973597E23C698FF1C7E7B205B7D92F725C07A3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_5c7a7e719e28f2806ee8c5d9f9a65644_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_5c7a7e719e28f2806ee8c5d9f9a65644_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_5c7a7e719e28f2806ee8c5d9f9a65644_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 13.0MB
- SHA256 9d6c2bd6e54ad03749da9e2609d3a1f14631ec43782b8fa215777986c7903443
- MD5 5c7a7e719e28f2806ee8c5d9f9a65644
- SHA1 939799601d519ff6f00f0d706f51ccda69649a59
- SHA512 a9ccad60f5ea2e93fedbd8854dcf959018a0c64e0186483a1390f5d3251a783a5d1edbac0f283af5cab568f22dcbc95940ea94284796f8eb043323b1d8171f50
- SSDEEP 196608:JtcI4/h1+QtcI4/h1+FdtcI4/h1+QtcI4/h1+FRw8:IEUUEURw8
- TLSH T13AD65B22B1E14065C1A99031CF86973597E23C698FF1C7E7B205B7D92F725C07A3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry