General
- Target 2026-09-09_f4e8bf33b9578975d6b2ebbbf07f4816_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 9.8MB
- Sample260909-lbef6svanb
- SHA256 c06e56fe5a098b3c0eb0a38aece3df85c91657edcf68ce704cc3aa6c1b64d792
- MD5 f4e8bf33b9578975d6b2ebbbf07f4816
- SHA1 9046b6674f603cea0fcc70767189b00a8f2a94c6
- SHA512 369dcb4dcf943baa5190d363778bab9dcbc42761f03f623f3ef8d49d8c8e9c1ee985900a5a78ef075a1fc47c1ef7ad15f48274886a74aa69c1307c27bb18ce39
- SSDEEP 98304:Pe5x6c1/e5x6c1Q0oAaldmdmnpxe5x6c1/e5x6c1Q0oAaldmdmnpm:IkxKmd0AkxKmd0g
- TLSH T135A66C03E19544E5D26AD034CE569235E732BC494BF196EB3290FAE93F336D07A3A316
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_f4e8bf33b9578975d6b2ebbbf07f4816_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_f4e8bf33b9578975d6b2ebbbf07f4816_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_f4e8bf33b9578975d6b2ebbbf07f4816_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 9.8MB
- SHA256 c06e56fe5a098b3c0eb0a38aece3df85c91657edcf68ce704cc3aa6c1b64d792
- MD5 f4e8bf33b9578975d6b2ebbbf07f4816
- SHA1 9046b6674f603cea0fcc70767189b00a8f2a94c6
- SHA512 369dcb4dcf943baa5190d363778bab9dcbc42761f03f623f3ef8d49d8c8e9c1ee985900a5a78ef075a1fc47c1ef7ad15f48274886a74aa69c1307c27bb18ce39
- SSDEEP 98304:Pe5x6c1/e5x6c1Q0oAaldmdmnpxe5x6c1/e5x6c1Q0oAaldmdmnpm:IkxKmd0AkxKmd0g
- TLSH T135A66C03E19544E5D26AD034CE569235E732BC494BF196EB3290FAE93F336D07A3A316
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry