General
- Target 2026-11-06_f5c0ffb0dbfa9d82604763acff6f12e0_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- Sample261107-xfztfset9w
- SHA256 c51074a7ecdc64a345cf3e71cb198cf64d2919ec0afee7ca233fa6d50ec92874
- MD5 f5c0ffb0dbfa9d82604763acff6f12e0
- SHA1 13efd6d899c17e69906a8e4d370e257d6222226a
- SHA512 0d7fa7459e1a3af91344a4950985b57d7629275f5d5599789bf1ac2ae1bca5b9d9a42ad8d0c58b4fe0d9f9dd2dd2bc5e0ed544e41278008a7be0b0c1c52587eb
- SSDEEP 12288:GaoVmb+K4YWE+66uTHJ/J+kvvcLIb1M/Bo1lBISiuWXW:GDVmbhywxx+1L6goLGSiuWXW
- TLSH T1B9D46B1176D0CF31E2AF0536996596B89A7FBC208F2187CB63947E1DBE306C19A35B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-06_f5c0ffb0dbfa9d82604763acff6f12e0_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-06_f5c0ffb0dbfa9d82604763acff6f12e0_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-06_f5c0ffb0dbfa9d82604763acff6f12e0_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- SHA256 c51074a7ecdc64a345cf3e71cb198cf64d2919ec0afee7ca233fa6d50ec92874
- MD5 f5c0ffb0dbfa9d82604763acff6f12e0
- SHA1 13efd6d899c17e69906a8e4d370e257d6222226a
- SHA512 0d7fa7459e1a3af91344a4950985b57d7629275f5d5599789bf1ac2ae1bca5b9d9a42ad8d0c58b4fe0d9f9dd2dd2bc5e0ed544e41278008a7be0b0c1c52587eb
- SSDEEP 12288:GaoVmb+K4YWE+66uTHJ/J+kvvcLIb1M/Bo1lBISiuWXW:GDVmbhywxx+1L6goLGSiuWXW
- TLSH T1B9D46B1176D0CF31E2AF0536996596B89A7FBC208F2187CB63947E1DBE306C19A35B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Drops file in System32 directory