General
- Target 2026-08-24_ce86ebb2d577e381e10fbfef46b169c9_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smoke-loader_stop_vidar_wannacry
- Size 3.4MB
- Sample260825-a3eqgavhph
- SHA256 08d7c15c813101556bde40491fdbae1326470ac5eb9f2586b2829a8e8dc88429
- MD5 ce86ebb2d577e381e10fbfef46b169c9
- SHA1 f454f856a6d4fde0adda1244b641029b954049ff
- SHA512 83f20b613158e5aaf873c62c1ed60a2fd5c805c0b51c0d6cbd6d5c018187776a8142c9e696d78ae6334789b2ce697caf671d00f9bf526f4b4684d3980c6bb12b
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHkJEM/nW1PszNsQCy6i1zuajsauZjaV2:7IDQ/nW1Psz+tw
- TLSH T117F57A02E7E700B6ED6B5130C6695221BA77B82117B086CF13D4D93E1F32BD1AA79727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_ce86ebb2d577e381e10fbfef46b169c9_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smo.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_ce86ebb2d577e381e10fbfef46b169c9_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smo.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_ce86ebb2d577e381e10fbfef46b169c9_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smoke-loader_stop_vidar_wannacry
- Size 3.4MB
- SHA256 08d7c15c813101556bde40491fdbae1326470ac5eb9f2586b2829a8e8dc88429
- MD5 ce86ebb2d577e381e10fbfef46b169c9
- SHA1 f454f856a6d4fde0adda1244b641029b954049ff
- SHA512 83f20b613158e5aaf873c62c1ed60a2fd5c805c0b51c0d6cbd6d5c018187776a8142c9e696d78ae6334789b2ce697caf671d00f9bf526f4b4684d3980c6bb12b
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHkJEM/nW1PszNsQCy6i1zuajsauZjaV2:7IDQ/nW1Psz+tw
- TLSH T117F57A02E7E700B6ED6B5130C6695221BA77B82117B086CF13D4D93E1F32BD1AA79727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory