General
- Target 2026-08-18_cf73957420208d6af39d780070fb7e08_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 13.2MB
- Sample260818-rv44tscm2v
- SHA256 c7e5a94e20e1b7ddad0686f6cca479a8277affbaadfda8f5bc23fab846d9b0f8
- MD5 cf73957420208d6af39d780070fb7e08
- SHA1 17cf6508419d7f6d4e363fc79dce9e98d8a5def5
- SHA512 fe06a1ba1b253c3014bb6470966d1826cbb4e8e7ab38689bebc6e9996bdc1bf7682a38cb8c29f97525759112c06392b22f6751905928451d8bdb90495ebe9cd7
- SSDEEP 98304:nu5x6M1WoDDfezSC6v2XMHtLapI5u5x6M1WoDDfezSC6v2XMHtLapIAq9ceq9+22:Qi8E6cIei8E6cIAWqQI0pyve
- TLSH T123D66C12B2F50165D0AED074CF669731EBB27C558BF086DF2240B2D92F72AD07A39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_cf73957420208d6af39d780070fb7e08_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_cf73957420208d6af39d780070fb7e08_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_cf73957420208d6af39d780070fb7e08_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 13.2MB
- SHA256 c7e5a94e20e1b7ddad0686f6cca479a8277affbaadfda8f5bc23fab846d9b0f8
- MD5 cf73957420208d6af39d780070fb7e08
- SHA1 17cf6508419d7f6d4e363fc79dce9e98d8a5def5
- SHA512 fe06a1ba1b253c3014bb6470966d1826cbb4e8e7ab38689bebc6e9996bdc1bf7682a38cb8c29f97525759112c06392b22f6751905928451d8bdb90495ebe9cd7
- SSDEEP 98304:nu5x6M1WoDDfezSC6v2XMHtLapI5u5x6M1WoDDfezSC6v2XMHtLapIAq9ceq9+22:Qi8E6cIei8E6cIAWqQI0pyve
- TLSH T123D66C12B2F50165D0AED074CF669731EBB27C558BF086DF2240B2D92F72AD07A39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry