General
- Target 2026-08-16_ade27a4747faf39683bcc891b148bd22_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 13.0MB
- Sample260816-cc9t2abl7y
- SHA256 eb720864ae044db37d07f6eb196b36d7b268265e35f2e88f288a9dcdecc3d374
- MD5 ade27a4747faf39683bcc891b148bd22
- SHA1 88c06c83e8a58bc3fa9cad2310a1b4077e4302e8
- SHA512 732449bb09bbf81d8aa92007adc755de6ab0d0e2e555c3fbcbc6736cbdf0504bc5c4454bc94d4502b5d22febcace89454dcb9f5f8e28a12238818cd6c7539422
- SSDEEP 98304:Su5x6M1WoDDkl2u5x6M1WoDDklIhx0zZu5x6M1WoDDkl2u5x6M1WoDDklIhx0z9m:Ji8kbi8kSKz+i8kbi8kSKzbKz
- TLSH T182D68E6272E1006AD16E45319B669731D6F1BC628FA0C7CFC285F71A2F727C06A3671B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_ade27a4747faf39683bcc891b148bd22_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_ade27a4747faf39683bcc891b148bd22_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_ade27a4747faf39683bcc891b148bd22_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 13.0MB
- SHA256 eb720864ae044db37d07f6eb196b36d7b268265e35f2e88f288a9dcdecc3d374
- MD5 ade27a4747faf39683bcc891b148bd22
- SHA1 88c06c83e8a58bc3fa9cad2310a1b4077e4302e8
- SHA512 732449bb09bbf81d8aa92007adc755de6ab0d0e2e555c3fbcbc6736cbdf0504bc5c4454bc94d4502b5d22febcace89454dcb9f5f8e28a12238818cd6c7539422
- SSDEEP 98304:Su5x6M1WoDDkl2u5x6M1WoDDklIhx0zZu5x6M1WoDDkl2u5x6M1WoDDklIhx0z9m:Ji8kbi8kSKz+i8kbi8kSKzbKz
- TLSH T182D68E6272E1006AD16E45319B669731D6F1BC628FA0C7CFC285F71A2F727C06A3671B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry