General
- Target 2026-08-16_9bed4ff3b8d5e8d37130a913221bb9ce_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_stealc_vidar
- Size 14.4MB
- Sample260816-el8dnsbb36
- SHA256 e425fd7231f2d14a1308515f3784ebb08f93a9d48c40544a1bbcb7c8f67fdc62
- MD5 9bed4ff3b8d5e8d37130a913221bb9ce
- SHA1 4b036bc27bb9db8bfff8b7a5154c282450811a7f
- SHA512 1999328cfcdc63ba380e0e640cc45c922288f18417f86dea7ef26fda05df3ea21d16357dbe148346b2932e4ecf83cf408ebf3b28ff6088e749d24e7ad07d50e1
- SSDEEP 196608:Ji8yi8B/h1+Qi8yi8B/h1+cvyEYc/b3w8Co:F2/2bvyEYKbR
- TLSH T1EDE67C91B6A481B5E17A8134C5B69676F7767C421B30CB8F5281FA2E2F337809D36723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_9bed4ff3b8d5e8d37130a913221bb9ce_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_9bed4ff3b8d5e8d37130a913221bb9ce_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_9bed4ff3b8d5e8d37130a913221bb9ce_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_stealc_vidar
- Size 14.4MB
- SHA256 e425fd7231f2d14a1308515f3784ebb08f93a9d48c40544a1bbcb7c8f67fdc62
- MD5 9bed4ff3b8d5e8d37130a913221bb9ce
- SHA1 4b036bc27bb9db8bfff8b7a5154c282450811a7f
- SHA512 1999328cfcdc63ba380e0e640cc45c922288f18417f86dea7ef26fda05df3ea21d16357dbe148346b2932e4ecf83cf408ebf3b28ff6088e749d24e7ad07d50e1
- SSDEEP 196608:Ji8yi8B/h1+Qi8yi8B/h1+cvyEYc/b3w8Co:F2/2bvyEYKbR
- TLSH T1EDE67C91B6A481B5E17A8134C5B69676F7767C421B30CB8F5281FA2E2F337809D36723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry