General
- Target 2026-08-17_41e72b536bc90e67d6eee5a90dc3f2d9_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys
- Size 395KB
- Sample260817-d63hgssfld
- SHA256 8e1874af3dabf998ae4c629d9ba679c3ddf098bad8067ae740afdebffeceb22e
- MD5 41e72b536bc90e67d6eee5a90dc3f2d9
- SHA1 366bfc9e9a1b49bb381531a47a3734514c7c4452
- SHA512 3b6e26c8344787dea8c0dde654a88266da636a4ed4d44ca5c63c2f02206996f2e4b4e891a2b33fa0aa8edf4e256cdad32576df533b018e007c455d9588fb2390
- SSDEEP 6144:GjuDOhVLS5nj+CYXIYztiP/aK2h9H/B+biiuW1FXEc:GaoVmp+n4YzcP/aK2vB+WiuWXh
- TLSH T162846B1236F04179F0B25A315D766B7197BAFC329E318B6F57842B6C1E30980DA22B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_41e72b536bc90e67d6eee5a90dc3f2d9_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_41e72b536bc90e67d6eee5a90dc3f2d9_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_41e72b536bc90e67d6eee5a90dc3f2d9_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys
- Size 395KB
- SHA256 8e1874af3dabf998ae4c629d9ba679c3ddf098bad8067ae740afdebffeceb22e
- MD5 41e72b536bc90e67d6eee5a90dc3f2d9
- SHA1 366bfc9e9a1b49bb381531a47a3734514c7c4452
- SHA512 3b6e26c8344787dea8c0dde654a88266da636a4ed4d44ca5c63c2f02206996f2e4b4e891a2b33fa0aa8edf4e256cdad32576df533b018e007c455d9588fb2390
- SSDEEP 6144:GjuDOhVLS5nj+CYXIYztiP/aK2h9H/B+biiuW1FXEc:GaoVmp+n4YzcP/aK2vB+WiuWXh
- TLSH T162846B1236F04179F0B25A315D766B7197BAFC329E318B6F57842B6C1E30980DA22B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory