General
- Target 2026-09-29_2660606215bc9da73ab41836ba034d3c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys
- Size 342KB
- Sample260930-eqzmbsec94
- SHA256 64bbf497dd66f5a0af62607986279218c4bd7c1421d87b135a79e9910cf01697
- MD5 2660606215bc9da73ab41836ba034d3c
- SHA1 652925b21ed36e189d284295ffcdd32f29261616
- SHA512 896922c0c7d6fda24d226144c5a04c21108bcb20662fcdc24471d391fa58b50694f14100af602a4a197eb83436c1211adbf23d6a9dd96b06f0c8f45db36999c1
- SSDEEP 6144:GjuDOhVLS5nj+CPXIYmMH7cCxP8psB+E9siuW1FXEi:GaoVmp+84YmO7cCmWB+E9siuWXz
- TLSH T17F747C1136D08FB1E1AF443148A59E748B7BFC304E219BDB63947E2D3E31981DA26767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_2660606215bc9da73ab41836ba034d3c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_2660606215bc9da73ab41836ba034d3c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_2660606215bc9da73ab41836ba034d3c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys
- Size 342KB
- SHA256 64bbf497dd66f5a0af62607986279218c4bd7c1421d87b135a79e9910cf01697
- MD5 2660606215bc9da73ab41836ba034d3c
- SHA1 652925b21ed36e189d284295ffcdd32f29261616
- SHA512 896922c0c7d6fda24d226144c5a04c21108bcb20662fcdc24471d391fa58b50694f14100af602a4a197eb83436c1211adbf23d6a9dd96b06f0c8f45db36999c1
- SSDEEP 6144:GjuDOhVLS5nj+CPXIYmMH7cCxP8psB+E9siuW1FXEi:GaoVmp+84YmO7cCmWB+E9siuWXz
- TLSH T17F747C1136D08FB1E1AF443148A59E748B7BFC304E219BDB63947E2D3E31981DA26767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory