General
- Target 2026-08-24_315112de2420750c345d0a44577aca5d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 16.7MB
- Sample260825-thc6pahh52
- SHA256 7f7f00d1038fa68c73f7bd143cb2677ef92a1209b710efd04df5f6edfdc004af
- MD5 315112de2420750c345d0a44577aca5d
- SHA1 a9bf21a58bd24714f9d09772d11c5fe2af34b271
- SHA512 7ef86ea4b357dde387ae4e03efc879641864e24aa7d09a811663bcf64e274c6702a080a00ae696a22ed8f0976daaa63d6d525218bdb0346ca8de314a5a455a73
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz4TvUko/Sz6j0I8Ni6e5x6c1/e5x6c1ze56:IkQk1To/Eq08hkQk1To/Eq08m
- TLSH T1CE079F59B6D900F6C57094B0C82617B6E2B2F80543318BCB53E8DE1E2E3BBD45E39769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_315112de2420750c345d0a44577aca5d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_315112de2420750c345d0a44577aca5d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_315112de2420750c345d0a44577aca5d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 16.7MB
- SHA256 7f7f00d1038fa68c73f7bd143cb2677ef92a1209b710efd04df5f6edfdc004af
- MD5 315112de2420750c345d0a44577aca5d
- SHA1 a9bf21a58bd24714f9d09772d11c5fe2af34b271
- SHA512 7ef86ea4b357dde387ae4e03efc879641864e24aa7d09a811663bcf64e274c6702a080a00ae696a22ed8f0976daaa63d6d525218bdb0346ca8de314a5a455a73
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz4TvUko/Sz6j0I8Ni6e5x6c1/e5x6c1ze56:IkQk1To/Eq08hkQk1To/Eq08m
- TLSH T1CE079F59B6D900F6C57094B0C82617B6E2B2F80543318BCB53E8DE1E2E3BBD45E39769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application