General
- Target 2026-08-25_c704e3a690877b5909a7a7868dd1950e_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- Sample260826-l4mcgsttht
- SHA256 35e15e56c5d45fbf694640a59c051af43e893a3a3a7c8f6c4161a6f69157a8ec
- MD5 c704e3a690877b5909a7a7868dd1950e
- SHA1 e44ad365f1f09f4cdbdd606fc85bda1b09a41348
- SHA512 a1c1e25e3f30a82e02a710440dc4482d295be0b28dd396a56ed2662ba4b510e10a71ac4fcaff09eef341891e57d83eea70c3a819da4eddd633eb4fd23ac9777c
- SSDEEP 12288:GaoVmp+84YWE+66uTHJ/J+kvvcLIb1M/Bo1lBISiuWX1:GDVmpzywxx+1L6goLGSiuWX1
- TLSH T124D46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_c704e3a690877b5909a7a7868dd1950e_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_c704e3a690877b5909a7a7868dd1950e_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_c704e3a690877b5909a7a7868dd1950e_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- SHA256 35e15e56c5d45fbf694640a59c051af43e893a3a3a7c8f6c4161a6f69157a8ec
- MD5 c704e3a690877b5909a7a7868dd1950e
- SHA1 e44ad365f1f09f4cdbdd606fc85bda1b09a41348
- SHA512 a1c1e25e3f30a82e02a710440dc4482d295be0b28dd396a56ed2662ba4b510e10a71ac4fcaff09eef341891e57d83eea70c3a819da4eddd633eb4fd23ac9777c
- SSDEEP 12288:GaoVmp+84YWE+66uTHJ/J+kvvcLIb1M/Bo1lBISiuWX1:GDVmpzywxx+1L6goLGSiuWX1
- TLSH T124D46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory