General
- Target 2026-06-04_14f8cd1fcc90cc4016991f00acdfd843_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 7.4MB
- Sample260604-nm4ljset3r
- SHA256 0c1ff02abe217e12bed2ddb2312b565dcb58a9c99024c1ffad00a9a2a12a529c
- MD5 14f8cd1fcc90cc4016991f00acdfd843
- SHA1 ed778e1a05a4cdc37548421122afb701e33b5740
- SHA512 3da95bc7949887eb24c89fd597a32109e5c71a00ecec4d7c7f9215f5503a06617fc9fd5c1f6076b025142d80ee35ab9c6599a9d6524d88a27c265ea51009d48d
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qgLxDy:Qi8kLri8kLyly
- TLSH T10E769E03B6D440BDE16E863496769632EA72BC460B11DACF56D0F65E2E73BC09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_14f8cd1fcc90cc4016991f00acdfd843_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_14f8cd1fcc90cc4016991f00acdfd843_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_14f8cd1fcc90cc4016991f00acdfd843_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 7.4MB
- SHA256 0c1ff02abe217e12bed2ddb2312b565dcb58a9c99024c1ffad00a9a2a12a529c
- MD5 14f8cd1fcc90cc4016991f00acdfd843
- SHA1 ed778e1a05a4cdc37548421122afb701e33b5740
- SHA512 3da95bc7949887eb24c89fd597a32109e5c71a00ecec4d7c7f9215f5503a06617fc9fd5c1f6076b025142d80ee35ab9c6599a9d6524d88a27c265ea51009d48d
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qgLxDy:Qi8kLri8kLyly
- TLSH T10E769E03B6D440BDE16E863496769632EA72BC460B11DACF56D0F65E2E73BC09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry