General
- Target 2026-09-03_c0e03b677083fa6605679f259ea6eacd_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 11.9MB
- Sample260903-3pgbcst1fx
- SHA256 58ff1d8e1e83e6f92c9b841191d70702d401e679eb6c3a6d874e62600e0a1d9f
- MD5 c0e03b677083fa6605679f259ea6eacd
- SHA1 0d93652200ff16a6adacab22a405be32d84aee3a
- SHA512 bb84a6fc264a9e336e9fc823196760d5e1f36da3957dadb4e0c490a56ee1f5ced81455eaff0f6eeabc8edb98ba72dd5f354eaf1737acb204d5544131b97be76e
- SSDEEP 98304:Pe5x6c1/e5x6c1iLapIFWQtZ/K0tGOFWVRuLftCTsRxtTvUko/Sz6j0I8Ni:IkmcIFWyZ/K0ttYVAATs/tTo/Eq08
- TLSH T17FC66B26B2E900D5D179E074CF264331E3B2BC1987F196DF21947ACA2E3BAD07A39715
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_c0e03b677083fa6605679f259ea6eacd_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_c0e03b677083fa6605679f259ea6eacd_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_c0e03b677083fa6605679f259ea6eacd_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 11.9MB
- SHA256 58ff1d8e1e83e6f92c9b841191d70702d401e679eb6c3a6d874e62600e0a1d9f
- MD5 c0e03b677083fa6605679f259ea6eacd
- SHA1 0d93652200ff16a6adacab22a405be32d84aee3a
- SHA512 bb84a6fc264a9e336e9fc823196760d5e1f36da3957dadb4e0c490a56ee1f5ced81455eaff0f6eeabc8edb98ba72dd5f354eaf1737acb204d5544131b97be76e
- SSDEEP 98304:Pe5x6c1/e5x6c1iLapIFWQtZ/K0tGOFWVRuLftCTsRxtTvUko/Sz6j0I8Ni:IkmcIFWyZ/K0ttYVAATs/tTo/Eq08
- TLSH T17FC66B26B2E900D5D179E074CF264331E3B2BC1987F196DF21947ACA2E3BAD07A39715
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry