General
- Target 2026-08-18_7d2c2e35b32d4a9d10923ecde922a9ad_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 3.6MB
- Sample260819-czpsdacp2v
- SHA256 578581a8a019550edac2c42a0884bb13e4e8666b768899f09b40bc97f28cb6cf
- MD5 7d2c2e35b32d4a9d10923ecde922a9ad
- SHA1 ecbc35224ab3ea13e375405a01f91d31ef9d2dc6
- SHA512 f8c3f5a8e98927963a35e499162565058004c4482e969344f49b6a575f899ec5cc9e857f32b8e68a73a8ceaaf008f201637e0c74724bf282a5af2efcfdf27778
- SSDEEP 49152:tYRw5x6M1vgjI45TMwwapIgTMCbRquA/m2yL5zbF:Su5x6M1pLapIkoq/
- TLSH T128065B2671E100A9C199C075DF4A9632E3F13C698BF0D7FBA151B6C62F339D07A3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_7d2c2e35b32d4a9d10923ecde922a9ad_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_7d2c2e35b32d4a9d10923ecde922a9ad_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_7d2c2e35b32d4a9d10923ecde922a9ad_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 3.6MB
- SHA256 578581a8a019550edac2c42a0884bb13e4e8666b768899f09b40bc97f28cb6cf
- MD5 7d2c2e35b32d4a9d10923ecde922a9ad
- SHA1 ecbc35224ab3ea13e375405a01f91d31ef9d2dc6
- SHA512 f8c3f5a8e98927963a35e499162565058004c4482e969344f49b6a575f899ec5cc9e857f32b8e68a73a8ceaaf008f201637e0c74724bf282a5af2efcfdf27778
- SSDEEP 49152:tYRw5x6M1vgjI45TMwwapIgTMCbRquA/m2yL5zbF:Su5x6M1pLapIkoq/
- TLSH T128065B2671E100A9C199C075DF4A9632E3F13C698BF0D7FBA151B6C62F339D07A3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry