General
- Target 2026-08-16_d44fd6fb1051b0bd3370ce988629d3f3_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 13.6MB
- Sample260816-b89y8sbl2x
- SHA256 c6aa422801800e9bb8c4a4d8d3200dfd854d5c06ec6844642cd66d3912bfebdc
- MD5 d44fd6fb1051b0bd3370ce988629d3f3
- SHA1 477d11a154f3eee5461129ea9fc54ec226dbcaf3
- SHA512 512cde8a1c0e29a9bbd9af8e33236e2cecbae7b8f9f583eb23e69c05411bbeb90124447236c2134176577a24c0f82ff26e5ef9112d582a1de32071c401b36b9d
- SSDEEP 196608:JtcI4/h1+QtcI4/h1+FdtcI4/h1+QtcI4/h1+FQKz:IEUUEUQK
- TLSH T109E64A22B1E24065C1999031CF96973597E23C698FF1C7E7B205B3D92F725C07A3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_d44fd6fb1051b0bd3370ce988629d3f3_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_d44fd6fb1051b0bd3370ce988629d3f3_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_d44fd6fb1051b0bd3370ce988629d3f3_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 13.6MB
- SHA256 c6aa422801800e9bb8c4a4d8d3200dfd854d5c06ec6844642cd66d3912bfebdc
- MD5 d44fd6fb1051b0bd3370ce988629d3f3
- SHA1 477d11a154f3eee5461129ea9fc54ec226dbcaf3
- SHA512 512cde8a1c0e29a9bbd9af8e33236e2cecbae7b8f9f583eb23e69c05411bbeb90124447236c2134176577a24c0f82ff26e5ef9112d582a1de32071c401b36b9d
- SSDEEP 196608:JtcI4/h1+QtcI4/h1+FdtcI4/h1+QtcI4/h1+FQKz:IEUUEUQK
- TLSH T109E64A22B1E24065C1999031CF96973597E23C698FF1C7E7B205B3D92F725C07A3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry