General
- Target 2026-04-17_b184cf0f3c06d3628169c31c63708e41_cobalt-strike_elex_emotet_icedid_nymaim_rhadamanthys_vidar
- Size 449KB
- Sample260417-e6hzhsaw2y
- SHA256 796c751a96052778f786edffe5962ef5cfb7c8aea3283b378d8cdd11c74012d6
- MD5 b184cf0f3c06d3628169c31c63708e41
- SHA1 6a316e5a40508879c1685455a5519a74777625d8
- SHA512 921d9f6ba8888f54716698fdf90376e3e0f91fbf4387c2ebfcfad28acd60405253b5ea54257fed50faf5e3b2c671b78a9e0f84145b73052a1bfc9fcab71c9560
- SSDEEP 6144:GjuDOhVLS5nj+CPXIYV540UVwleMITTmNv1ohWsqkiuW1FXEw:GaoVmp+84Yb4lssmroCkiuWXt
- TLSH T16AA45B1535E40AF2D1AF80748AE14A66E277FC711F204FEB43905F597E32A905D2BB2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_b184cf0f3c06d3628169c31c63708e41_cobalt-strike_elex_emotet_icedid_nymaim_rhadamanthys_vidar.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_b184cf0f3c06d3628169c31c63708e41_cobalt-strike_elex_emotet_icedid_nymaim_rhadamanthys_vidar.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_b184cf0f3c06d3628169c31c63708e41_cobalt-strike_elex_emotet_icedid_nymaim_rhadamanthys_vidar
- Size 449KB
- SHA256 796c751a96052778f786edffe5962ef5cfb7c8aea3283b378d8cdd11c74012d6
- MD5 b184cf0f3c06d3628169c31c63708e41
- SHA1 6a316e5a40508879c1685455a5519a74777625d8
- SHA512 921d9f6ba8888f54716698fdf90376e3e0f91fbf4387c2ebfcfad28acd60405253b5ea54257fed50faf5e3b2c671b78a9e0f84145b73052a1bfc9fcab71c9560
- SSDEEP 6144:GjuDOhVLS5nj+CPXIYV540UVwleMITTmNv1ohWsqkiuW1FXEw:GaoVmp+84Yb4lssmroCkiuWXt
- TLSH T16AA45B1535E40AF2D1AF80748AE14A66E277FC711F204FEB43905F597E32A905D2BB2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory