General
- Target 2026-08-23_b14d604bd704dc849c3c970ac7b70a5f_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smoke-loader_stop_vidar_wannacry
- Size 4.2MB
- Sample260825-2h3ekser8x
- SHA256 71d825b4f514ae0b8a7cdb1c6e2e7ee6823a7d989729ff75ee910e1787409d15
- MD5 b14d604bd704dc849c3c970ac7b70a5f
- SHA1 530039caea11293ab9fdcd85de7226c9a518bcf2
- SHA512 c0200645faa37afd73dc0bbac54eabd395cb0925fab2b7ac898dc6eebaf5b0e1f82fc56f78920d7e9ca0ac507950f6aba6962351c2e2e94011cbc7f2a3b7f1e4
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHkJEM/nW1PszNsQCy6i1zuajsauZjaV21eW4SkZP4sz9Mb:7IDQ/nW1Psz+twsfkZc
- TLSH T11D166A02E6BB4272ECB79075C6A66665BA337811177086CF0384D63D2F33BD19A39727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_b14d604bd704dc849c3c970ac7b70a5f_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smo.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_b14d604bd704dc849c3c970ac7b70a5f_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smo.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_b14d604bd704dc849c3c970ac7b70a5f_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smoke-loader_stop_vidar_wannacry
- Size 4.2MB
- SHA256 71d825b4f514ae0b8a7cdb1c6e2e7ee6823a7d989729ff75ee910e1787409d15
- MD5 b14d604bd704dc849c3c970ac7b70a5f
- SHA1 530039caea11293ab9fdcd85de7226c9a518bcf2
- SHA512 c0200645faa37afd73dc0bbac54eabd395cb0925fab2b7ac898dc6eebaf5b0e1f82fc56f78920d7e9ca0ac507950f6aba6962351c2e2e94011cbc7f2a3b7f1e4
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHkJEM/nW1PszNsQCy6i1zuajsauZjaV21eW4SkZP4sz9Mb:7IDQ/nW1Psz+twsfkZc
- TLSH T11D166A02E6BB4272ECB79075C6A66665BA337811177086CF0384D63D2F33BD19A39727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory