General
- Target 2026-08-16_4bc2b56b72ee388d02011d8902b44acd_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 9.9MB
- Sample260816-jt7vbsttht
- SHA256 d39d3d52af5a1ee159927b313e29e95790b5662a9f51fa0aed3641603f5ea972
- MD5 4bc2b56b72ee388d02011d8902b44acd
- SHA1 0a4cdf2d736b3283d69116a0ef03c30bbca624f6
- SHA512 2ef6d32724b2abe9586cf8f0ae15d260412385ff3443b61020dc86490c698f4f59cb921d6ee804763c4657c707f4a6c8cfe5e0bf8652c7658402011e7580ff64
- SSDEEP 196608:JSWyZ/K0ttYVAA1/h1+KSWyZ/K0ttYVAA1/h1+ia:zyZ/K0ttYZ3yZ/K0ttYZ0
- TLSH T104A67C13F59541E9D06AC079CF869332EB32784907F1A6DF265097E52E37AE0BB39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_4bc2b56b72ee388d02011d8902b44acd_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_4bc2b56b72ee388d02011d8902b44acd_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_4bc2b56b72ee388d02011d8902b44acd_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 9.9MB
- SHA256 d39d3d52af5a1ee159927b313e29e95790b5662a9f51fa0aed3641603f5ea972
- MD5 4bc2b56b72ee388d02011d8902b44acd
- SHA1 0a4cdf2d736b3283d69116a0ef03c30bbca624f6
- SHA512 2ef6d32724b2abe9586cf8f0ae15d260412385ff3443b61020dc86490c698f4f59cb921d6ee804763c4657c707f4a6c8cfe5e0bf8652c7658402011e7580ff64
- SSDEEP 196608:JSWyZ/K0ttYVAA1/h1+KSWyZ/K0ttYVAA1/h1+ia:zyZ/K0ttYZ3yZ/K0ttYZ0
- TLSH T104A67C13F59541E9D06AC079CF869332EB32784907F1A6DF265097E52E37AE0BB39720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry