General
- Target 2026-05-23_fc7d65f8c4002bbf5cf2d56652a6cc13_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- Sample260523-e2kmjsfw3y
- SHA256 292e772e92ab2f768b88819105c0aebf73aec2b69fb3b6cbdc464cf8bffda6c1
- MD5 fc7d65f8c4002bbf5cf2d56652a6cc13
- SHA1 bf2dee4d944ad26ca3cee9485ef1b6f9ceeeeb40
- SHA512 a014fb0f5f31bc546d0a3e4751f0788c366985b33ddc5635cb6469e69a29caa5ea7463d7445ddee29803860475572b10a9ea840e45ff1a8a7a6abe283cb14329
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWX3:GDVmpzSi/RyhdshPmiuWX3
- TLSH T1D0947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-23_fc7d65f8c4002bbf5cf2d56652a6cc13_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_fc7d65f8c4002bbf5cf2d56652a6cc13_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-23_fc7d65f8c4002bbf5cf2d56652a6cc13_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- SHA256 292e772e92ab2f768b88819105c0aebf73aec2b69fb3b6cbdc464cf8bffda6c1
- MD5 fc7d65f8c4002bbf5cf2d56652a6cc13
- SHA1 bf2dee4d944ad26ca3cee9485ef1b6f9ceeeeb40
- SHA512 a014fb0f5f31bc546d0a3e4751f0788c366985b33ddc5635cb6469e69a29caa5ea7463d7445ddee29803860475572b10a9ea840e45ff1a8a7a6abe283cb14329
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWX3:GDVmpzSi/RyhdshPmiuWX3
- TLSH T1D0947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory