General
- Target 2026-08-18_1dc1c6593bdb27e6501e3f08b2fc3960_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar
- Size 6.9MB
- Sample260818-w4ggcazthy
- SHA256 364cb815d030036bf08e3153dfbafcfcdaeafde91364d8eb4ed9c85a621df521
- MD5 1dc1c6593bdb27e6501e3f08b2fc3960
- SHA1 3a405c1de820263c1698b6a69db141813c7e0e1c
- SHA512 37e6c04447ea87921ce3bb030eb6b0fbe9f13639fa7fbe5a4a3a6f687a3c5a986dfa9949f75f26d4cd4e500ce5ce447604a1a8f924878804a0b30461cc2f6a0a
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qs/h1+:Qi8kLri8kLG/h1+
- TLSH T10C768E02F6E44179E17E8634D6769636EA73BC420B61D6CF56C4F62E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_1dc1c6593bdb27e6501e3f08b2fc3960_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_1dc1c6593bdb27e6501e3f08b2fc3960_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_1dc1c6593bdb27e6501e3f08b2fc3960_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar
- Size 6.9MB
- SHA256 364cb815d030036bf08e3153dfbafcfcdaeafde91364d8eb4ed9c85a621df521
- MD5 1dc1c6593bdb27e6501e3f08b2fc3960
- SHA1 3a405c1de820263c1698b6a69db141813c7e0e1c
- SHA512 37e6c04447ea87921ce3bb030eb6b0fbe9f13639fa7fbe5a4a3a6f687a3c5a986dfa9949f75f26d4cd4e500ce5ce447604a1a8f924878804a0b30461cc2f6a0a
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qs/h1+:Qi8kLri8kLG/h1+
- TLSH T10C768E02F6E44179E17E8634D6769636EA73BC420B61D6CF56C4F62E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry