General
- Target 2026-06-29_e27f830f17b9d04cf94eeede8dfae7cd_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_vidar
- Size 630KB
- Sample260630-crdedadv2n
- SHA256 2bcf93274824048c6b7417372d4e124dd51684b0a89e9112ea9722ba5565e4b2
- MD5 e27f830f17b9d04cf94eeede8dfae7cd
- SHA1 4cbb50cb995891b05bf847eefd211e319d8105e3
- SHA512 7652567daeff32758e12c613b782848d5646c4e98bcd8c467676bddd70f6e4be6a679b46ec5c58d79e8e62d6f62b2f04a78929fc8a72df17216225a9333fbd4d
- SSDEEP 12288:GeDz63AqObrRD+k3HVJ5xDfp4D7/SAOZi+5v4+rcKftD:lz63A5JVJTt4D7/SAOZi+5v48cKfB
- TLSH T18AD47D1677E444F4E177E63EC9A50A19EA727C258F32D70E1358826B0F237529D3BB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-29_e27f830f17b9d04cf94eeede8dfae7cd_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_e27f830f17b9d04cf94eeede8dfae7cd_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_e27f830f17b9d04cf94eeede8dfae7cd_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_vidar
- Size 630KB
- SHA256 2bcf93274824048c6b7417372d4e124dd51684b0a89e9112ea9722ba5565e4b2
- MD5 e27f830f17b9d04cf94eeede8dfae7cd
- SHA1 4cbb50cb995891b05bf847eefd211e319d8105e3
- SHA512 7652567daeff32758e12c613b782848d5646c4e98bcd8c467676bddd70f6e4be6a679b46ec5c58d79e8e62d6f62b2f04a78929fc8a72df17216225a9333fbd4d
- SSDEEP 12288:GeDz63AqObrRD+k3HVJ5xDfp4D7/SAOZi+5v4+rcKftD:lz63A5JVJTt4D7/SAOZi+5v48cKfB
- TLSH T18AD47D1677E444F4E177E63EC9A50A19EA727C258F32D70E1358826B0F237529D3BB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application