General
- Target 2026-10-07_fdbf58432e99e6d608b9b93d6460b2b9_amadey_cobalt-strike_elex_emotet_hijackloader_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 5.2MB
- Sample261007-3v8msshv2j
- SHA256 c891a1ff5249a97a81fd1f7da76935d771857b4cee02dd3da35667e0a5b6ffb7
- MD5 fdbf58432e99e6d608b9b93d6460b2b9
- SHA1 9f986a4dcc91c1fb94d904a332ba2fdb1d674c98
- SHA512 629450b22ae8fcc70abddcc4ccf2720d4a38c3675dad747ded0aa63d51ae05826482ce64e29c5018e0abf7c00771dfd82c74c43f691d277a56523c0f524f9487
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHkJEM/rn/4MnYYJ2ZhqSGLHkJEMcinebutmkO+wAOInO4Xrzz:TIDQ/rwIDQciTs+wE9XD8ystsFa6L88
- TLSH T174465A01A3634173DC626071C06A7B589A707FB42F22D6EBAE407619FE327C655373BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-07_fdbf58432e99e6d608b9b93d6460b2b9_amadey_cobalt-strike_elex_emotet_hijackloader_redline-st.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-07_fdbf58432e99e6d608b9b93d6460b2b9_amadey_cobalt-strike_elex_emotet_hijackloader_redline-st.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-07_fdbf58432e99e6d608b9b93d6460b2b9_amadey_cobalt-strike_elex_emotet_hijackloader_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 5.2MB
- SHA256 c891a1ff5249a97a81fd1f7da76935d771857b4cee02dd3da35667e0a5b6ffb7
- MD5 fdbf58432e99e6d608b9b93d6460b2b9
- SHA1 9f986a4dcc91c1fb94d904a332ba2fdb1d674c98
- SHA512 629450b22ae8fcc70abddcc4ccf2720d4a38c3675dad747ded0aa63d51ae05826482ce64e29c5018e0abf7c00771dfd82c74c43f691d277a56523c0f524f9487
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHkJEM/rn/4MnYYJ2ZhqSGLHkJEMcinebutmkO+wAOInO4Xrzz:TIDQ/rwIDQciTs+wE9XD8ystsFa6L88
- TLSH T174465A01A3634173DC626071C06A7B589A707FB42F22D6EBAE407619FE327C655373BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory