General
- Target 2026-08-15_0dae326c05fce5123321284e46163ea9_amadey_cobalt-strike_elex_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 4.4MB
- Sample260815-ql2fxaxcrc
- SHA256 89970fe2b9848241fd951fbf869927e52af93ed22004e3d639ef24e4f41e4daa
- MD5 0dae326c05fce5123321284e46163ea9
- SHA1 942e2e4256f0484b3145967390f0a2007e3902ff
- SHA512 f287c5d9cad6622deb932a74953795d7a80c8dbd427eec780c88c8429dc7cacc535b29accd8fdc236e0776f7c693848d319320394b4713e200f8b38349c7a0d6
- SSDEEP 98304:mgwkQ7DIqMe+De1XzBP/OlsLzFmNfW6FJKxxfZA4X:mgwk3iCe1X3
- TLSH T18A2649C1BE50B0B5E5A9D47439ABB27CD62B7CB45B5245CF61C7FBAE06322E01D36202
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_0dae326c05fce5123321284e46163ea9_amadey_cobalt-strike_elex_icedid_njrat_remcos_smoke-loader_stealc_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_0dae326c05fce5123321284e46163ea9_amadey_cobalt-strike_elex_icedid_njrat_remcos_smoke-loader_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_0dae326c05fce5123321284e46163ea9_amadey_cobalt-strike_elex_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 4.4MB
- SHA256 89970fe2b9848241fd951fbf869927e52af93ed22004e3d639ef24e4f41e4daa
- MD5 0dae326c05fce5123321284e46163ea9
- SHA1 942e2e4256f0484b3145967390f0a2007e3902ff
- SHA512 f287c5d9cad6622deb932a74953795d7a80c8dbd427eec780c88c8429dc7cacc535b29accd8fdc236e0776f7c693848d319320394b4713e200f8b38349c7a0d6
- SSDEEP 98304:mgwkQ7DIqMe+De1XzBP/OlsLzFmNfW6FJKxxfZA4X:mgwk3iCe1X3
- TLSH T18A2649C1BE50B0B5E5A9D47439ABB27CD62B7CB45B5245CF61C7FBAE06322E01D36202
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory