General
- Target 2026-05-30_f134217cc04208410b7b373a742221ea_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- Sample260530-cbdefafs2p
- SHA256 6a9da4e7aa57b26b90fec685a86c4acb7db3c3f4592ba89ad8532a71db259fda
- MD5 f134217cc04208410b7b373a742221ea
- SHA1 c6eaf6a6f0da15e71656c27c7a2772043e8e7e89
- SHA512 d7e0350d57116facb8bdf00c66f02db7fce2ded83bf00add4fdf973e2b9afdc31139e63aedd5b776bd6f7b2d86c416c74c60975bc198c161be19616e3a133f0b
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXj:GDVmpzSi/RyhdshPmiuWXj
- TLSH T1D6947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-30_f134217cc04208410b7b373a742221ea_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-30_f134217cc04208410b7b373a742221ea_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-30_f134217cc04208410b7b373a742221ea_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- SHA256 6a9da4e7aa57b26b90fec685a86c4acb7db3c3f4592ba89ad8532a71db259fda
- MD5 f134217cc04208410b7b373a742221ea
- SHA1 c6eaf6a6f0da15e71656c27c7a2772043e8e7e89
- SHA512 d7e0350d57116facb8bdf00c66f02db7fce2ded83bf00add4fdf973e2b9afdc31139e63aedd5b776bd6f7b2d86c416c74c60975bc198c161be19616e3a133f0b
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXj:GDVmpzSi/RyhdshPmiuWXj
- TLSH T1D6947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory