General
- Target 2026-08-20_92d6b1751a2547992503a543a6df979a_amadey_cobalt-strike_elex_emotet_remcos_vidar_wannacry
- Size 8.8MB
- Sample260820-cvz3jsdn5t
- SHA256 df6bb28d872ad3bc48e473e9eb26828d21559f2978523f2b78003a410f9face4
- MD5 92d6b1751a2547992503a543a6df979a
- SHA1 2c90a5dedee2d6a02460f972678e3abd53c31568
- SHA512 ca14235a8025590cf00b0c0163678dd2b971692fea96164860a9e22b529e4c1482cbac1d69d8763897c53241863b1ef2c6ba373e6e77fcb7b4c228787edaebb1
- SSDEEP 98304:Su5x6M1WoDDkl2u5x6M1WoDDklJu5x6M1WoDDkl2u5x6M1WoDX:Ji8kbi8kIi8kbiC
- TLSH T10B969F8176D0407BE2BE0A3090799635A776FD425711C7CFA6D6FA6A2E323C09D32727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_92d6b1751a2547992503a543a6df979a_amadey_cobalt-strike_elex_emotet_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_92d6b1751a2547992503a543a6df979a_amadey_cobalt-strike_elex_emotet_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_92d6b1751a2547992503a543a6df979a_amadey_cobalt-strike_elex_emotet_remcos_vidar_wannacry
- Size 8.8MB
- SHA256 df6bb28d872ad3bc48e473e9eb26828d21559f2978523f2b78003a410f9face4
- MD5 92d6b1751a2547992503a543a6df979a
- SHA1 2c90a5dedee2d6a02460f972678e3abd53c31568
- SHA512 ca14235a8025590cf00b0c0163678dd2b971692fea96164860a9e22b529e4c1482cbac1d69d8763897c53241863b1ef2c6ba373e6e77fcb7b4c228787edaebb1
- SSDEEP 98304:Su5x6M1WoDDkl2u5x6M1WoDDklJu5x6M1WoDDkl2u5x6M1WoDX:Ji8kbi8kIi8kbiC
- TLSH T10B969F8176D0407BE2BE0A3090799635A776FD425711C7CFA6D6FA6A2E323C09D32727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry