General
- Target 2026-08-17_9ed72ebc52eca162f5eed69424892e37_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar
- Size 7.5MB
- Sample260817-ssvm2stbnb
- SHA256 2c8fd10602645d472e534105eb8ff11f9389273dc57f62ff528af47fb0894a6b
- MD5 9ed72ebc52eca162f5eed69424892e37
- SHA1 c65d4a7246fdd6149531113426e8c65f54a93505
- SHA512 4133de8d5c66fd99fbb806d11fecc957f79d44e775d4e5e75c0d5e09db35017a09c1bcadcc3cb1003287f13d727c0fb719fd893514249a38c994f67b0321944b
- SSDEEP 98304:nu5x6M1WoDDklJ6q3/h1+iu5x6M1WoDDklJ6q3/h1+l:Qi8kLV/h1+5i8kLV/h1+l
- TLSH T1E8868E42B6E4417AE07B8534D5B69676EA727C420B21DACF5285F61E2E337C0DA36333
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_9ed72ebc52eca162f5eed69424892e37_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_9ed72ebc52eca162f5eed69424892e37_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_9ed72ebc52eca162f5eed69424892e37_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar
- Size 7.5MB
- SHA256 2c8fd10602645d472e534105eb8ff11f9389273dc57f62ff528af47fb0894a6b
- MD5 9ed72ebc52eca162f5eed69424892e37
- SHA1 c65d4a7246fdd6149531113426e8c65f54a93505
- SHA512 4133de8d5c66fd99fbb806d11fecc957f79d44e775d4e5e75c0d5e09db35017a09c1bcadcc3cb1003287f13d727c0fb719fd893514249a38c994f67b0321944b
- SSDEEP 98304:nu5x6M1WoDDklJ6q3/h1+iu5x6M1WoDDklJ6q3/h1+l:Qi8kLV/h1+5i8kLV/h1+l
- TLSH T1E8868E42B6E4417AE07B8534D5B69676EA727C420B21DACF5285F61E2E337C0DA36333
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry