General
- Target 2026-04-18_982976ca49de91cb8f23470af6dfaf0b_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- Sample260418-dcejkaft51
- SHA256 8f470f8f684e959bbce307b19ae98e48b2c72446b571f1aed13964fa72c506ab
- MD5 982976ca49de91cb8f23470af6dfaf0b
- SHA1 71b1fe7180e13b28cd228cf1f3942b087c86c47d
- SHA512 ae657462484f09a617e631a12cc1d37b7739973bd7c715182340f76363905cdc9f5c176926a16e9011d20da6a221aa1f32e457e7be3081ebf197e5542560f15b
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXj:GDVmpzSi/RyhdshPmiuWXj
- TLSH T150947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-18_982976ca49de91cb8f23470af6dfaf0b_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-18_982976ca49de91cb8f23470af6dfaf0b_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_982976ca49de91cb8f23470af6dfaf0b_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- SHA256 8f470f8f684e959bbce307b19ae98e48b2c72446b571f1aed13964fa72c506ab
- MD5 982976ca49de91cb8f23470af6dfaf0b
- SHA1 71b1fe7180e13b28cd228cf1f3942b087c86c47d
- SHA512 ae657462484f09a617e631a12cc1d37b7739973bd7c715182340f76363905cdc9f5c176926a16e9011d20da6a221aa1f32e457e7be3081ebf197e5542560f15b
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXj:GDVmpzSi/RyhdshPmiuWXj
- TLSH T150947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory