General
- Target 2026-08-27_de4eea3f4b549473a4235be7957c4e2f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 17.6MB
- Sample260828-e2e23asycv
- SHA256 ab1fb51d64ad5fddef58afa0dc497134121575661481a3ae549121e6c6045c16
- MD5 de4eea3f4b549473a4235be7957c4e2f
- SHA1 e124db326aec0c605ed616b3294d3fff17c6dffd
- SHA512 e9fec9e4f4d9f724d948e9457f8983e4c5081779ddcac80456c9d631a776d43426a0d8270482c670c9767c7caca8e04939e2d88f90b1c03b4ee54fedeb18ddb8
- SSDEEP 98304:Pe5x6c1/e5x6c1he5x6c1/e5x6c1n0oAaldmdmnpxe5x6c1/e5x6c1he5x6c1/eF:IkakYKmd0AkakYKmd0iWqQI0py+
- TLSH T1A1078D03F29540F5D15A9530CA6A9732EB32BC494BB196DB2350FAD52E336D07F3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_de4eea3f4b549473a4235be7957c4e2f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_de4eea3f4b549473a4235be7957c4e2f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_de4eea3f4b549473a4235be7957c4e2f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 17.6MB
- SHA256 ab1fb51d64ad5fddef58afa0dc497134121575661481a3ae549121e6c6045c16
- MD5 de4eea3f4b549473a4235be7957c4e2f
- SHA1 e124db326aec0c605ed616b3294d3fff17c6dffd
- SHA512 e9fec9e4f4d9f724d948e9457f8983e4c5081779ddcac80456c9d631a776d43426a0d8270482c670c9767c7caca8e04939e2d88f90b1c03b4ee54fedeb18ddb8
- SSDEEP 98304:Pe5x6c1/e5x6c1he5x6c1/e5x6c1n0oAaldmdmnpxe5x6c1/e5x6c1he5x6c1/eF:IkakYKmd0AkakYKmd0iWqQI0py+
- TLSH T1A1078D03F29540F5D15A9530CA6A9732EB32BC494BB196DB2350FAD52E336D07F3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry