General
- Target 2026-08-20_2277c1ed6ad9bb16218e252538aa173b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.9MB
- Sample260820-h4wpdasbla
- SHA256 aa4bdfb19aa9d0a17889c0afe513cc392787d8efd7298e8a6eaee98755c6da5a
- MD5 2277c1ed6ad9bb16218e252538aa173b
- SHA1 a54600871918bf9a38f64d0b400eb58f69d8c5de
- SHA512 96cab1013f6d9017cd24a7112c586e19d69346bfd2f034c7172fe2e4431746872d61d327954e9ab0c7a637406c6c004dbb82fe722e8fbac1d3a9db67aa4528d4
- SSDEEP 98304:Su5x6M1WoDDkl2u5x6M1WoDDklJu5x6M1WoDDkl2u5x6M1WoDDkl3LapIG:Ji8kbi8kIi8kbi8khcIG
- TLSH T1BFC69E5172E0007AE2AE4530CA69973597B2BC555BE1C7CFA2C5F6DA2E323C07932727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_2277c1ed6ad9bb16218e252538aa173b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_2277c1ed6ad9bb16218e252538aa173b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_2277c1ed6ad9bb16218e252538aa173b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.9MB
- SHA256 aa4bdfb19aa9d0a17889c0afe513cc392787d8efd7298e8a6eaee98755c6da5a
- MD5 2277c1ed6ad9bb16218e252538aa173b
- SHA1 a54600871918bf9a38f64d0b400eb58f69d8c5de
- SHA512 96cab1013f6d9017cd24a7112c586e19d69346bfd2f034c7172fe2e4431746872d61d327954e9ab0c7a637406c6c004dbb82fe722e8fbac1d3a9db67aa4528d4
- SSDEEP 98304:Su5x6M1WoDDkl2u5x6M1WoDDklJu5x6M1WoDDkl2u5x6M1WoDDkl3LapIG:Ji8kbi8kIi8kbi8khcIG
- TLSH T1BFC69E5172E0007AE2AE4530CA69973597B2BC555BE1C7CFA2C5F6DA2E323C07932727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry