General
- Target 2026-05-04_1059864ed57998dfecd6df1fb3e0dbbe_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- Sample260504-mkptyagy4y
- SHA256 928faaeb424379f15fef52c220437019ee83a253c494279f68848d055acb892d
- MD5 1059864ed57998dfecd6df1fb3e0dbbe
- SHA1 2a26517ba17105cc16e0fc45a2e2ccfea63c9bf3
- SHA512 28e7391e40e2383d65ac34df07b14081d08a3b0f707bfa8356d4be0ae9f69cf31f2d6358966df1b6398d5b3bc2465dc89b7b66d467b3c7338a35b746ed76fe16
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXU:GDVmpzSi/RyhdshPmiuWXU
- TLSH T1DF947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-04_1059864ed57998dfecd6df1fb3e0dbbe_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_1059864ed57998dfecd6df1fb3e0dbbe_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_1059864ed57998dfecd6df1fb3e0dbbe_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- SHA256 928faaeb424379f15fef52c220437019ee83a253c494279f68848d055acb892d
- MD5 1059864ed57998dfecd6df1fb3e0dbbe
- SHA1 2a26517ba17105cc16e0fc45a2e2ccfea63c9bf3
- SHA512 28e7391e40e2383d65ac34df07b14081d08a3b0f707bfa8356d4be0ae9f69cf31f2d6358966df1b6398d5b3bc2465dc89b7b66d467b3c7338a35b746ed76fe16
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXU:GDVmpzSi/RyhdshPmiuWXU
- TLSH T1DF947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory