General
- Target 2026-04-23_bfb686d9c51d7a6d0600b53f9abb1f8d_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- Sample260423-nd2etsbw7j
- SHA256 64fd04c9477f1ecc3131ee3cd68e9ef01a3e763036bfd57e84ed1920458c36f3
- MD5 bfb686d9c51d7a6d0600b53f9abb1f8d
- SHA1 30965b9442342f0351d709cfde5531ac1636ce91
- SHA512 e3e595caff746e57b4a336db009aa7efe0f309581c51c6ce490049e557b3270a957d8a9cadb34fb58d1af06331ed43005210c643f16de9b0e260851a4b3ee7c8
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXv:GDVmpzSi/RyhdshPmiuWXv
- TLSH T1C1947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-23_bfb686d9c51d7a6d0600b53f9abb1f8d_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-23_bfb686d9c51d7a6d0600b53f9abb1f8d_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-23_bfb686d9c51d7a6d0600b53f9abb1f8d_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- SHA256 64fd04c9477f1ecc3131ee3cd68e9ef01a3e763036bfd57e84ed1920458c36f3
- MD5 bfb686d9c51d7a6d0600b53f9abb1f8d
- SHA1 30965b9442342f0351d709cfde5531ac1636ce91
- SHA512 e3e595caff746e57b4a336db009aa7efe0f309581c51c6ce490049e557b3270a957d8a9cadb34fb58d1af06331ed43005210c643f16de9b0e260851a4b3ee7c8
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXv:GDVmpzSi/RyhdshPmiuWXv
- TLSH T1C1947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory