General
- Target 2026-08-19_31fd1e5c31ffc137d2c01bbbb7fa2e2a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 11.5MB
- Sample260819-kh77ds1apb
- SHA256 af4df96ac0061e3bfec6f824d3cf5b2a281ba274a222ed0ed0291d3a281d04d7
- MD5 31fd1e5c31ffc137d2c01bbbb7fa2e2a
- SHA1 7304746778f27b8b6daf93dd4838f7fb8066bcd6
- SHA512 083bb62d45dcd66bb233e14b767e17462d7d23cdeeb64e0a6571e2b7a1c00095cc1b377df03eed3903fa06717295b2818a21f295d03e3e855eababe0a1970717
- SSDEEP 98304:Su5x6M1WoDDkl2u5x6M1WoDDklJu5x6M1WoDDkl2u5x6M1WoDDkl3LapI4/h1+:Ji8kbi8kIi8kbi8khcI4/h1+
- TLSH T15DC69E5172E0007AE1AE4530CA65973597B2BC554BF1C7CFA285F6DA2E323C0BA36727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_31fd1e5c31ffc137d2c01bbbb7fa2e2a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_31fd1e5c31ffc137d2c01bbbb7fa2e2a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_31fd1e5c31ffc137d2c01bbbb7fa2e2a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 11.5MB
- SHA256 af4df96ac0061e3bfec6f824d3cf5b2a281ba274a222ed0ed0291d3a281d04d7
- MD5 31fd1e5c31ffc137d2c01bbbb7fa2e2a
- SHA1 7304746778f27b8b6daf93dd4838f7fb8066bcd6
- SHA512 083bb62d45dcd66bb233e14b767e17462d7d23cdeeb64e0a6571e2b7a1c00095cc1b377df03eed3903fa06717295b2818a21f295d03e3e855eababe0a1970717
- SSDEEP 98304:Su5x6M1WoDDkl2u5x6M1WoDDklJu5x6M1WoDDkl2u5x6M1WoDDkl3LapI4/h1+:Ji8kbi8kIi8kbi8khcI4/h1+
- TLSH T15DC69E5172E0007AE1AE4530CA65973597B2BC554BF1C7CFA285F6DA2E323C0BA36727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry