General
- Target 2026-08-16_80df81f1e68bdcb07893de0b936b003c_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_stealc_vidar
- Size 13.9MB
- Sample260816-v6aadafm3s
- SHA256 8f077332a0eb97841fc0cd2dd3d97c5b7cd5d9cd468f6a504ebb5440c11ae860
- MD5 80df81f1e68bdcb07893de0b936b003c
- SHA1 d6a7c43b6ed85cfd2d5deb87a7c43c9d046f2c5b
- SHA512 2e4a6ca0aa4f17c75626f7e52ec563f969e02b43ad1cfb253ac53a729b2886f71314def324493f9b9ef4d233cdc1ffba7c8a56d535fae50bdc526396d73d5aea
- SSDEEP 196608:JSWyZ/K0ttYVAA1/h1+KSWyZ/K0ttYVAA1/h1+fSvyEYc/b3w8O:zyZ/K0ttYZ3yZ/K0ttYZsSvyEYKbi
- TLSH T15BE67C13F69440E5D06AD078CE669632EB7278490BB1A6DF2250C7DA2F37AD07F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_80df81f1e68bdcb07893de0b936b003c_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_80df81f1e68bdcb07893de0b936b003c_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_80df81f1e68bdcb07893de0b936b003c_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_stealc_vidar
- Size 13.9MB
- SHA256 8f077332a0eb97841fc0cd2dd3d97c5b7cd5d9cd468f6a504ebb5440c11ae860
- MD5 80df81f1e68bdcb07893de0b936b003c
- SHA1 d6a7c43b6ed85cfd2d5deb87a7c43c9d046f2c5b
- SHA512 2e4a6ca0aa4f17c75626f7e52ec563f969e02b43ad1cfb253ac53a729b2886f71314def324493f9b9ef4d233cdc1ffba7c8a56d535fae50bdc526396d73d5aea
- SSDEEP 196608:JSWyZ/K0ttYVAA1/h1+KSWyZ/K0ttYVAA1/h1+fSvyEYc/b3w8O:zyZ/K0ttYZ3yZ/K0ttYZsSvyEYKbi
- TLSH T15BE67C13F69440E5D06AD078CE669632EB7278490BB1A6DF2250C7DA2F37AD07F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry