General
- Target 2026-08-18_c5b93c4313916e28ec6bd3dc1ee2d765_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar
- Size 15.1MB
- Sample260818-vc8k3swejb
- SHA256 762767b3b68c431206d17b31423fbbb43fcc358f966aa81af0b72f70d8fbfbb0
- MD5 c5b93c4313916e28ec6bd3dc1ee2d765
- SHA1 00fc6efe7d749d1976074b4cb74d40efbb4cb440
- SHA512 ec9174278f03781f6244ebf552036bab46848e1da298b90e39300cfd9cb97d2a2d076762e61ab9ba5664c1a82e9eea27efb5f76c93fcc8f25766c74e8474f23f
- SSDEEP 196608:Qi8kLV/h1+5i8kLV/h1+mi8kLV/h1+5i8kLV/h1+8:IkLikLlkLikLV
- TLSH T190F69E42B6E4417AE07B8534D5B69676EA727C420B21DACF5285F61E2E337C0DA36333
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_c5b93c4313916e28ec6bd3dc1ee2d765_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_c5b93c4313916e28ec6bd3dc1ee2d765_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_c5b93c4313916e28ec6bd3dc1ee2d765_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar
- Size 15.1MB
- SHA256 762767b3b68c431206d17b31423fbbb43fcc358f966aa81af0b72f70d8fbfbb0
- MD5 c5b93c4313916e28ec6bd3dc1ee2d765
- SHA1 00fc6efe7d749d1976074b4cb74d40efbb4cb440
- SHA512 ec9174278f03781f6244ebf552036bab46848e1da298b90e39300cfd9cb97d2a2d076762e61ab9ba5664c1a82e9eea27efb5f76c93fcc8f25766c74e8474f23f
- SSDEEP 196608:Qi8kLV/h1+5i8kLV/h1+mi8kLV/h1+5i8kLV/h1+8:IkLikLlkLikLV
- TLSH T190F69E42B6E4417AE07B8534D5B69676EA727C420B21DACF5285F61E2E337C0DA36333
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry