General
- Target 2026-05-06_246343e8ac620b01a0a1bc9431c127ff_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 410KB
- Sample260506-ca22eadv8q
- SHA256 0d94ca9efec843e3afe801015f4361c9d4989aab33379f967dbb4fd9dafbc353
- MD5 246343e8ac620b01a0a1bc9431c127ff
- SHA1 82fe5071d8a36d68c02f748f927045cd381843d2
- SHA512 d18afd0938e035a4187daeb2640deaedbb77004e23a23e0883371cc728a641db7b8123bdd940016b97126ce85585636db3399fc6ba3edba3798e966895e7f1e2
- SSDEEP 12288:6aoVyp+D4YQi3drBRy9hdFIdhoyYTiuWXt:6DVypQci/RyhdshPmiuWXt
- TLSH T1AD94AE1632E144F5F1B64030CDA15A75EB77FC311B319ABF83609B6D9E336809D2AB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-06_246343e8ac620b01a0a1bc9431c127ff_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_246343e8ac620b01a0a1bc9431c127ff_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_246343e8ac620b01a0a1bc9431c127ff_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 410KB
- SHA256 0d94ca9efec843e3afe801015f4361c9d4989aab33379f967dbb4fd9dafbc353
- MD5 246343e8ac620b01a0a1bc9431c127ff
- SHA1 82fe5071d8a36d68c02f748f927045cd381843d2
- SHA512 d18afd0938e035a4187daeb2640deaedbb77004e23a23e0883371cc728a641db7b8123bdd940016b97126ce85585636db3399fc6ba3edba3798e966895e7f1e2
- SSDEEP 12288:6aoVyp+D4YQi3drBRy9hdFIdhoyYTiuWXt:6DVypQci/RyhdshPmiuWXt
- TLSH T1AD94AE1632E144F5F1B64030CDA15A75EB77FC311B319ABF83609B6D9E336809D2AB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory