General
- Target 2026-04-19_8a485ae9ac2980c9d486b8279bd22c16_cobalt-strike_elex_emotet_icedid_nymaim_rhadamanthys_vidar
- Size 449KB
- Sample260419-3aqaqagy91
- SHA256 0bdb8e9c3f77677e921e58739daf6f9563ee5e88964e13e9117d852f1eb618e4
- MD5 8a485ae9ac2980c9d486b8279bd22c16
- SHA1 12a1b496abda462b6be5e56a8fae93cafa67c961
- SHA512 02f4f23eb463d7e16da0a6083f883d2af38ab18e2d49374106f17fb20b601d05829539d7814da61440576c18a6504d39bd79cb048d82a76988f953439a010026
- SSDEEP 6144:GjuDOhVLS5n0PXIYV540UVwleMITTmNv1ohWsqkiuW1FXEh:GaoVmI4Yb4lssmroCkiuWX8
- TLSH T15BA45C1535E40AB2D16F80748AE24A66E237FC715F248FEB43905F597E329805D2BF2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_8a485ae9ac2980c9d486b8279bd22c16_cobalt-strike_elex_emotet_icedid_nymaim_rhadamanthys_vidar.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_8a485ae9ac2980c9d486b8279bd22c16_cobalt-strike_elex_emotet_icedid_nymaim_rhadamanthys_vidar.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_8a485ae9ac2980c9d486b8279bd22c16_cobalt-strike_elex_emotet_icedid_nymaim_rhadamanthys_vidar
- Size 449KB
- SHA256 0bdb8e9c3f77677e921e58739daf6f9563ee5e88964e13e9117d852f1eb618e4
- MD5 8a485ae9ac2980c9d486b8279bd22c16
- SHA1 12a1b496abda462b6be5e56a8fae93cafa67c961
- SHA512 02f4f23eb463d7e16da0a6083f883d2af38ab18e2d49374106f17fb20b601d05829539d7814da61440576c18a6504d39bd79cb048d82a76988f953439a010026
- SSDEEP 6144:GjuDOhVLS5n0PXIYV540UVwleMITTmNv1ohWsqkiuW1FXEh:GaoVmI4Yb4lssmroCkiuWX8
- TLSH T15BA45C1535E40AB2D16F80748AE24A66E237FC715F248FEB43905F597E329805D2BF2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory