General
- Target 2026-05-17_6898d186869788491c84adf3c7515178_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- Sample260517-chmaxsbx7t
- SHA256 e6b3af075ef1702c2659e943323ed47c36e7d46f3582d5976b5f984a96ef92b0
- MD5 6898d186869788491c84adf3c7515178
- SHA1 ef06a0a882916a8d22a037f12a8b4b3ef9f47b31
- SHA512 f3203c8236582987bca2b3f7b53a142905d6bfed1bd2fe69a917188602158dcbd16bd749d28cb666664cd92e304cda0a6d6afbfe00c5501ffd7dfaa8b01092c7
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXf:GDVmpzSi/RyhdshPmiuWXf
- TLSH T1D4947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-17_6898d186869788491c84adf3c7515178_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-17_6898d186869788491c84adf3c7515178_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-17_6898d186869788491c84adf3c7515178_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- SHA256 e6b3af075ef1702c2659e943323ed47c36e7d46f3582d5976b5f984a96ef92b0
- MD5 6898d186869788491c84adf3c7515178
- SHA1 ef06a0a882916a8d22a037f12a8b4b3ef9f47b31
- SHA512 f3203c8236582987bca2b3f7b53a142905d6bfed1bd2fe69a917188602158dcbd16bd749d28cb666664cd92e304cda0a6d6afbfe00c5501ffd7dfaa8b01092c7
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXf:GDVmpzSi/RyhdshPmiuWXf
- TLSH T1D4947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory