General
- Target 2026-08-16_cedc3cddae61d2b4c0530827046e83d0_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_remcos_vidar
- Size 3.0MB
- Sample260816-d74f6syfnc
- SHA256 e56f2ae0c9de37940c13140e37effff2433005e64a80fb503b4a9faf46658e43
- MD5 cedc3cddae61d2b4c0530827046e83d0
- SHA1 ad61b7f4488f4245da9d52b6756914e5588a629c
- SHA512 64d1705e7f821eb8076e115dbd5f4095a00610d7dcbe54cf33e07a96b5304e699c4497888af378427238afb89c91456457d59b1497cfc3c18ff801dc8d882b9f
- SSDEEP 49152:BmrU3KyV18yjpD8ZD9CbRqu82887eIqZBsEZUJK9DBjcc/FCPjDj8hXZLGyqocSE:BhV1ZNYZD6oj2UgXq9ouFkULGyqobNq3
- TLSH T184E5C01333E04077D5738271955DEA26E7BAF831033199EB47A18A273F32AD2573B692
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_cedc3cddae61d2b4c0530827046e83d0_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_cedc3cddae61d2b4c0530827046e83d0_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_cedc3cddae61d2b4c0530827046e83d0_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_remcos_vidar
- Size 3.0MB
- SHA256 e56f2ae0c9de37940c13140e37effff2433005e64a80fb503b4a9faf46658e43
- MD5 cedc3cddae61d2b4c0530827046e83d0
- SHA1 ad61b7f4488f4245da9d52b6756914e5588a629c
- SHA512 64d1705e7f821eb8076e115dbd5f4095a00610d7dcbe54cf33e07a96b5304e699c4497888af378427238afb89c91456457d59b1497cfc3c18ff801dc8d882b9f
- SSDEEP 49152:BmrU3KyV18yjpD8ZD9CbRqu82887eIqZBsEZUJK9DBjcc/FCPjDj8hXZLGyqocSE:BhV1ZNYZD6oj2UgXq9ouFkULGyqobNq3
- TLSH T184E5C01333E04077D5738271955DEA26E7BAF831033199EB47A18A273F32AD2573B692
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory