General
- Target 2026-10-28_9787a43c5e2ebf0257161843079bde98_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- Sample261029-225daafv71
- SHA256 c074e245118c85ae1daa0be8d97a209fcdc86126d81f01b1ed2361ab16c5956f
- MD5 9787a43c5e2ebf0257161843079bde98
- SHA1 11201d053691b24b889ca17cba6d4967f6cac199
- SHA512 c51719eac5c6568db254bf01079e1d05b377d64ef80bd885a98c78fb32b1df4374762cb3729ef0b3a2b6c2008a1d34a5a4a6c18b25941d9540bc11452df08562
- SSDEEP 12288:GaoV0JZ4YOE+66uTHJ/J+kvvcLIb1M/Bo0lBM1iuWXN:GDV0TKwxx+1L6goYq1iuWXN
- TLSH T15ED46C1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1D7E306C19A35B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_9787a43c5e2ebf0257161843079bde98_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_9787a43c5e2ebf0257161843079bde98_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_9787a43c5e2ebf0257161843079bde98_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- SHA256 c074e245118c85ae1daa0be8d97a209fcdc86126d81f01b1ed2361ab16c5956f
- MD5 9787a43c5e2ebf0257161843079bde98
- SHA1 11201d053691b24b889ca17cba6d4967f6cac199
- SHA512 c51719eac5c6568db254bf01079e1d05b377d64ef80bd885a98c78fb32b1df4374762cb3729ef0b3a2b6c2008a1d34a5a4a6c18b25941d9540bc11452df08562
- SSDEEP 12288:GaoV0JZ4YOE+66uTHJ/J+kvvcLIb1M/Bo0lBM1iuWXN:GDV0TKwxx+1L6goYq1iuWXN
- TLSH T15ED46C1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1D7E306C19A35B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory