General
- Target 2026-08-15_85fab2cb10bf27f324fc6d324ce8b118_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 5.5MB
- Sample260815-m2dg8svaqd
- SHA256 cc811d5d83d50a6bba0b161bb65ad8741a9fba72d5e92c3bfc60faf1304902a8
- MD5 85fab2cb10bf27f324fc6d324ce8b118
- SHA1 8d476d2f99cd98581c91d87ee64b4a9d922cf501
- SHA512 d01cfa6c7c7aa1b8317784574eb97c727e133e7b855e2d31bbdbaaf092219c6919c5fbf68a6590a391350ae90faf3c7f40474e8433095486420e8df681290a02
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftC1/h1+J/h1+:JSWyZ/K0ttYVAA1/h1+J/h1+
- TLSH T104467C13F19441E9D06AC079CF969336EB32784907F1A6DF224197E92E37AD0BB39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_85fab2cb10bf27f324fc6d324ce8b118_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_85fab2cb10bf27f324fc6d324ce8b118_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_85fab2cb10bf27f324fc6d324ce8b118_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 5.5MB
- SHA256 cc811d5d83d50a6bba0b161bb65ad8741a9fba72d5e92c3bfc60faf1304902a8
- MD5 85fab2cb10bf27f324fc6d324ce8b118
- SHA1 8d476d2f99cd98581c91d87ee64b4a9d922cf501
- SHA512 d01cfa6c7c7aa1b8317784574eb97c727e133e7b855e2d31bbdbaaf092219c6919c5fbf68a6590a391350ae90faf3c7f40474e8433095486420e8df681290a02
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftC1/h1+J/h1+:JSWyZ/K0ttYVAA1/h1+J/h1+
- TLSH T104467C13F19441E9D06AC079CF969336EB32784907F1A6DF224197E92E37AD0BB39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry