General
- Target 2026-04-18_3d401a3811f2e4ea69f7e9813f47350d_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- Sample260418-c39lysfs2x
- SHA256 dd462e09e36872e63c07cc941c6840d9200e5531d364041eeeaa24083764c68f
- MD5 3d401a3811f2e4ea69f7e9813f47350d
- SHA1 833dda9d93d0a51c34c5c25e5295cd866e4ed0f6
- SHA512 51abf017b1fbd4c4ac5f8beb13a8d9847b898934ecb09ae24032a6c3bef71081f072c1badca7c04adc8a6c72712339487f48cf2f74914ef87a899df85b568b00
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXr:GDVmpzSi/RyhdshPmiuWXr
- TLSH T1E2947C1632D44EF5E1BF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-18_3d401a3811f2e4ea69f7e9813f47350d_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-18_3d401a3811f2e4ea69f7e9813f47350d_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_3d401a3811f2e4ea69f7e9813f47350d_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- SHA256 dd462e09e36872e63c07cc941c6840d9200e5531d364041eeeaa24083764c68f
- MD5 3d401a3811f2e4ea69f7e9813f47350d
- SHA1 833dda9d93d0a51c34c5c25e5295cd866e4ed0f6
- SHA512 51abf017b1fbd4c4ac5f8beb13a8d9847b898934ecb09ae24032a6c3bef71081f072c1badca7c04adc8a6c72712339487f48cf2f74914ef87a899df85b568b00
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXr:GDVmpzSi/RyhdshPmiuWXr
- TLSH T1E2947C1632D44EF5E1BF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory