General
- Target 2026-09-06_9dbb61cf859916235332659e03d8ba3b_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 3.2MB
- Sample260906-1grq1sgr2w
- SHA256 55aeb7e90fdba3155ae8ccd26eebde3363281c84bf6bc8caeabee31071989d67
- MD5 9dbb61cf859916235332659e03d8ba3b
- SHA1 95dbe41e0bdf9f9e756d6dada7609ddfe4086cd7
- SHA512 efc645389594639d71ea88d7d3d65f3944378d8211d0f70e6dd743526533e174170a7da78643c94975d2ab675fc0e9467685b30aee852148a494c3a99bf27707
- SSDEEP 49152:0ENwzIR257BzIqR6FoRvku04YLWRr+6V+t8EqVT+fs:0gwkQ7FIqMe2zt8EW
- TLSH T12BF55C3173E24059E8AA51B19FAA923491D57CB1CFE4D2CB91C573EA4B725E03E3630B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_9dbb61cf859916235332659e03d8ba3b_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_9dbb61cf859916235332659e03d8ba3b_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_9dbb61cf859916235332659e03d8ba3b_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 3.2MB
- SHA256 55aeb7e90fdba3155ae8ccd26eebde3363281c84bf6bc8caeabee31071989d67
- MD5 9dbb61cf859916235332659e03d8ba3b
- SHA1 95dbe41e0bdf9f9e756d6dada7609ddfe4086cd7
- SHA512 efc645389594639d71ea88d7d3d65f3944378d8211d0f70e6dd743526533e174170a7da78643c94975d2ab675fc0e9467685b30aee852148a494c3a99bf27707
- SSDEEP 49152:0ENwzIR257BzIqR6FoRvku04YLWRr+6V+t8EqVT+fs:0gwkQ7FIqMe2zt8EW
- TLSH T12BF55C3173E24059E8AA51B19FAA923491D57CB1CFE4D2CB91C573EA4B725E03E3630B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory