General
- Target 2026-10-26_dce0b89f3ef5b2c8e798e634648b975b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys
- Size 342KB
- Sample261027-fn4nyacf98
- SHA256 08b5a6628a430974d2bd981bfe607957f22c01bb4b3acb11be7f1c844705ea7c
- MD5 dce0b89f3ef5b2c8e798e634648b975b
- SHA1 20f4d8fbad8f87eef4916f96d2e9facccadb9c2f
- SHA512 42b38505732eb92b00e2f3df5c10a3ec87b2138ee242b9c01c4cd53bce8df12b803bfec5bcad5353b3c79565a48dd365063214f22ef36a5b4c8384f3e3b796e2
- SSDEEP 6144:GjuDOhVLS5nj+CYgTXXIYpMH7cCxP8psB+E9siuW1FXEO:GaoVmp+Dc4YpO7cCmWB+E9siuWX/
- TLSH T1BF74AE1236D0C4B5E1A945310CB59F748BBAFC700E319A9B73D47B2D1F31A81DA2AB67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_dce0b89f3ef5b2c8e798e634648b975b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_dce0b89f3ef5b2c8e798e634648b975b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_dce0b89f3ef5b2c8e798e634648b975b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys
- Size 342KB
- SHA256 08b5a6628a430974d2bd981bfe607957f22c01bb4b3acb11be7f1c844705ea7c
- MD5 dce0b89f3ef5b2c8e798e634648b975b
- SHA1 20f4d8fbad8f87eef4916f96d2e9facccadb9c2f
- SHA512 42b38505732eb92b00e2f3df5c10a3ec87b2138ee242b9c01c4cd53bce8df12b803bfec5bcad5353b3c79565a48dd365063214f22ef36a5b4c8384f3e3b796e2
- SSDEEP 6144:GjuDOhVLS5nj+CYgTXXIYpMH7cCxP8psB+E9siuW1FXEO:GaoVmp+Dc4YpO7cCmWB+E9siuWX/
- TLSH T1BF74AE1236D0C4B5E1A945310CB59F748BBAFC700E319A9B73D47B2D1F31A81DA2AB67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory