General
- Target 2026-08-15_5e9be9a1efa2bc472e0c8ca9a35d6091_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar_wannacry
- Size 4.9MB
- Sample260815-pkfx5swdmd
- SHA256 e5032b7ffe4877ab808bc3edf906a6ccf673945a0e867d7799a2beea80a3d72a
- MD5 5e9be9a1efa2bc472e0c8ca9a35d6091
- SHA1 751f399f3acf16e1b1afc4872c3ca1ad444c0d79
- SHA512 b24fa5a4b753ad3da7b3abceb9c16706e0f229864f51083efceacb1339bcc803ac7233d644fd8e6a94b1b03598bfdc3df4d66d47eebb445f8ff4dfb0fa99d23c
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftC1/h1+:JSWyZ/K0ttYVAA1/h1+
- TLSH T100367C13F59541E9D06AC079CF869332EB32784907F1A6DF265097E52E37AE0BB39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_5e9be9a1efa2bc472e0c8ca9a35d6091_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_5e9be9a1efa2bc472e0c8ca9a35d6091_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_5e9be9a1efa2bc472e0c8ca9a35d6091_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar_wannacry
- Size 4.9MB
- SHA256 e5032b7ffe4877ab808bc3edf906a6ccf673945a0e867d7799a2beea80a3d72a
- MD5 5e9be9a1efa2bc472e0c8ca9a35d6091
- SHA1 751f399f3acf16e1b1afc4872c3ca1ad444c0d79
- SHA512 b24fa5a4b753ad3da7b3abceb9c16706e0f229864f51083efceacb1339bcc803ac7233d644fd8e6a94b1b03598bfdc3df4d66d47eebb445f8ff4dfb0fa99d23c
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftC1/h1+:JSWyZ/K0ttYVAA1/h1+
- TLSH T100367C13F59541E9D06AC079CF869332EB32784907F1A6DF265097E52E37AE0BB39720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry