General
- Target 2026-04-20_894547b4f6ee214b211586a732643f41_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- Sample260420-evdknacw9v
- SHA256 8093adba20e3deb33bc55e5621646e4175a7203d0690a60da00c1370dd964c1b
- MD5 894547b4f6ee214b211586a732643f41
- SHA1 332ccb863ac1e465c18c80bae4a82b9e55055a4c
- SHA512 0e8695290c66807fb90aa848b252f1ba8fd77695d9d413b5105b04854928638792d4f5ef0611abdd858e05bd404bf64fd62d07a1684fd2cdd2c3c3f46b4d3382
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXt:GDVmpzSi/RyhdshPmiuWXt
- TLSH T1D9947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-20_894547b4f6ee214b211586a732643f41_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_894547b4f6ee214b211586a732643f41_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_894547b4f6ee214b211586a732643f41_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- SHA256 8093adba20e3deb33bc55e5621646e4175a7203d0690a60da00c1370dd964c1b
- MD5 894547b4f6ee214b211586a732643f41
- SHA1 332ccb863ac1e465c18c80bae4a82b9e55055a4c
- SHA512 0e8695290c66807fb90aa848b252f1ba8fd77695d9d413b5105b04854928638792d4f5ef0611abdd858e05bd404bf64fd62d07a1684fd2cdd2c3c3f46b4d3382
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXt:GDVmpzSi/RyhdshPmiuWXt
- TLSH T1D9947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory