General
- Target 2026-08-30_f23ff20a904efe002c05b0c21d53fcb9_amadey_cobalt-strike_elex_hijackloader_smoke-loader_vidar
- Size 4.6MB
- Sample260831-bbz3rssglf
- SHA256 777814e478c8b9f587d333a1df3381503eba3619d6a00cc2c4f66bcf92fa8367
- MD5 f23ff20a904efe002c05b0c21d53fcb9
- SHA1 7bd00ca805fe9255b2bb9c9cf9db262e4ab805a0
- SHA512 d1bfefaf3886de7cf85e7ef38cd0eccbba86c21d5d1663f2de5ea8fe8acf21c8cdafdd042bb46972d8376be91427cfd78c8b47012fd2a392fa9380c693ba4987
- SSDEEP 98304:BUF13joQWQCkcewpiVF9LR1zrkz6v+mEJnD:B4loQWfkcdwVDV1zrk+AnD
- TLSH T12F36D017F5A401A9D02AD07AC796A336F97278850730BACF0394D7692F37BE19B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_f23ff20a904efe002c05b0c21d53fcb9_amadey_cobalt-strike_elex_hijackloader_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_f23ff20a904efe002c05b0c21d53fcb9_amadey_cobalt-strike_elex_hijackloader_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_f23ff20a904efe002c05b0c21d53fcb9_amadey_cobalt-strike_elex_hijackloader_smoke-loader_vidar
- Size 4.6MB
- SHA256 777814e478c8b9f587d333a1df3381503eba3619d6a00cc2c4f66bcf92fa8367
- MD5 f23ff20a904efe002c05b0c21d53fcb9
- SHA1 7bd00ca805fe9255b2bb9c9cf9db262e4ab805a0
- SHA512 d1bfefaf3886de7cf85e7ef38cd0eccbba86c21d5d1663f2de5ea8fe8acf21c8cdafdd042bb46972d8376be91427cfd78c8b47012fd2a392fa9380c693ba4987
- SSDEEP 98304:BUF13joQWQCkcewpiVF9LR1zrkz6v+mEJnD:B4loQWfkcdwVDV1zrk+AnD
- TLSH T12F36D017F5A401A9D02AD07AC796A336F97278850730BACF0394D7692F37BE19B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory