General
- Target 2026-08-16_fb2f312c0235fe769dddc9fe4beb8365_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 11.8MB
- Sample260816-lcbfxat1az
- SHA256 96652f9ef7c71ce0c5ce3762dd7b9fcc411cec9d50cddcc5398896a8343a4c79
- MD5 fb2f312c0235fe769dddc9fe4beb8365
- SHA1 7607be0ce042cdc6ce2c8de549fc00f3734e315f
- SHA512 9565529ba87d4bfa9c3a375fa1294adede7c9c4e0a573107766615ea6dec72c68d1c8e5a4f9109162b62b0f55839f3a979c15519ebf8f63f9532c81d52747718
- SSDEEP 98304:Su5x6M1WoDDkl2u5x6M1WoDDklIhx0zZu5x6M1WoDDkl2u5x6M1WoDDklIhx0zR:Ji8kbi8kSKz+i8kbi8kSKzR
- TLSH T1EBC69E5172E1007AE16E45309B6A973197F1BC628F90C7CF9285F61A2F727C06E3672B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_fb2f312c0235fe769dddc9fe4beb8365_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_fb2f312c0235fe769dddc9fe4beb8365_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_fb2f312c0235fe769dddc9fe4beb8365_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 11.8MB
- SHA256 96652f9ef7c71ce0c5ce3762dd7b9fcc411cec9d50cddcc5398896a8343a4c79
- MD5 fb2f312c0235fe769dddc9fe4beb8365
- SHA1 7607be0ce042cdc6ce2c8de549fc00f3734e315f
- SHA512 9565529ba87d4bfa9c3a375fa1294adede7c9c4e0a573107766615ea6dec72c68d1c8e5a4f9109162b62b0f55839f3a979c15519ebf8f63f9532c81d52747718
- SSDEEP 98304:Su5x6M1WoDDkl2u5x6M1WoDDklIhx0zZu5x6M1WoDDkl2u5x6M1WoDDklIhx0zR:Ji8kbi8kSKz+i8kbi8kSKzR
- TLSH T1EBC69E5172E1007AE16E45309B6A973197F1BC628F90C7CF9285F61A2F727C06E3672B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry