General
- Target 2026-09-09_91479c1a49a0a13cd84696f4a8c47134_amadey_cobalt-strike_elex_icedid_njrat_remcos_smoke-loader_vidar
- Size 7.9MB
- Sample260909-s9554scg33
- SHA256 dfbe5f172e5c051f0fece233b2b0778b6bc3073aa199edef924ee4874a874f88
- MD5 91479c1a49a0a13cd84696f4a8c47134
- SHA1 c9765077b82ca3f0a46df907669c16af9ada8b73
- SHA512 48251270dca8680f9b70f5c97e91a27018f9593845d6ff78f0df99d1176d5e236d2fe0d267327a87e980cf0231a6cdfd631cda0cc7f97968793f3a79ea4c5b66
- SSDEEP 98304:AgwkQ7SIqMe7gwkQ77IqMeS8x9ZL9E08M++LbPivYK:Agwkui7gwkviS8r1DRtXDK
- TLSH T16E867D01A7A140A4E5F7D2798AAA916AF6757CB0477492CF52D063EA0F337F06D3B342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_91479c1a49a0a13cd84696f4a8c47134_amadey_cobalt-strike_elex_icedid_njrat_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_91479c1a49a0a13cd84696f4a8c47134_amadey_cobalt-strike_elex_icedid_njrat_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_91479c1a49a0a13cd84696f4a8c47134_amadey_cobalt-strike_elex_icedid_njrat_remcos_smoke-loader_vidar
- Size 7.9MB
- SHA256 dfbe5f172e5c051f0fece233b2b0778b6bc3073aa199edef924ee4874a874f88
- MD5 91479c1a49a0a13cd84696f4a8c47134
- SHA1 c9765077b82ca3f0a46df907669c16af9ada8b73
- SHA512 48251270dca8680f9b70f5c97e91a27018f9593845d6ff78f0df99d1176d5e236d2fe0d267327a87e980cf0231a6cdfd631cda0cc7f97968793f3a79ea4c5b66
- SSDEEP 98304:AgwkQ7SIqMe7gwkQ77IqMeS8x9ZL9E08M++LbPivYK:Agwkui7gwkviS8r1DRtXDK
- TLSH T16E867D01A7A140A4E5F7D2798AAA916AF6757CB0477492CF52D063EA0F337F06D3B342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory