General
- Target 2026-06-29_f9d1fc3450fdc9f47ba0873e17c2b0ce_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_vidar
- Size 630KB
- Sample260630-be5gnact9m
- SHA256 bf1a6ce52644de73b71a91eccee568fbd43873c88a47d86cb2f445d83aa46aff
- MD5 f9d1fc3450fdc9f47ba0873e17c2b0ce
- SHA1 f8178b199e5f03207d76e804399ed911ccbad04f
- SHA512 1051dfdcfb37d6c8757ee5f3b27947da49637568c3be0bc8fce4f85f080ba1b8b5e3a37ce3111c9ccd417e127e629b2c46c401ed0d71dfec4fbe25e4bef69f75
- SSDEEP 12288:GeDz6vAqObrRD+k3HVJ5xDfp4D7/SAOZi+5v4+rcKftA:lz6vA5JVJTt4D7/SAOZi+5v48cKfm
- TLSH T1BFD47E1677E444F4E177E63EC9A50A19EA727C258F32D70E1358826B0F237529D3BB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-29_f9d1fc3450fdc9f47ba0873e17c2b0ce_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_f9d1fc3450fdc9f47ba0873e17c2b0ce_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_f9d1fc3450fdc9f47ba0873e17c2b0ce_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_vidar
- Size 630KB
- SHA256 bf1a6ce52644de73b71a91eccee568fbd43873c88a47d86cb2f445d83aa46aff
- MD5 f9d1fc3450fdc9f47ba0873e17c2b0ce
- SHA1 f8178b199e5f03207d76e804399ed911ccbad04f
- SHA512 1051dfdcfb37d6c8757ee5f3b27947da49637568c3be0bc8fce4f85f080ba1b8b5e3a37ce3111c9ccd417e127e629b2c46c401ed0d71dfec4fbe25e4bef69f75
- SSDEEP 12288:GeDz6vAqObrRD+k3HVJ5xDfp4D7/SAOZi+5v4+rcKftA:lz6vA5JVJTt4D7/SAOZi+5v48cKfm
- TLSH T1BFD47E1677E444F4E177E63EC9A50A19EA727C258F32D70E1358826B0F237529D3BB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application