General
- Target 2026-06-30_2b7805b3ac2c025500fa5d10d329bebd_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar
- Size 12.8MB
- Sample260701-glv5fsfs7r
- SHA256 932a2f61aed63cffa32f05e99b0a5d39e7aba5543ebd42ea4101fabccafbe275
- MD5 2b7805b3ac2c025500fa5d10d329bebd
- SHA1 8b5381f6744f9e5ae9118bbeddf4dded28c5dc9f
- SHA512 3fa40fe7df16fa44f71979e0c5fa11db9b8b7e34feaa02cef6f784dc7e5fda8d86746aff6e9ad2793905986f87dc5af0611e1368d546d0dfbc527ffd637ccb71
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qlTu5x6M1WoDDklJ6qCu5x6M1WoDDklJ1:Qi8kLri8kL7ci8kLri8kL7NPj
- TLSH T1F0D69E42B6E40179E17F4A34D6769632AA77BC460B11D7CF56D0FA2E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_2b7805b3ac2c025500fa5d10d329bebd_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_2b7805b3ac2c025500fa5d10d329bebd_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_2b7805b3ac2c025500fa5d10d329bebd_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar
- Size 12.8MB
- SHA256 932a2f61aed63cffa32f05e99b0a5d39e7aba5543ebd42ea4101fabccafbe275
- MD5 2b7805b3ac2c025500fa5d10d329bebd
- SHA1 8b5381f6744f9e5ae9118bbeddf4dded28c5dc9f
- SHA512 3fa40fe7df16fa44f71979e0c5fa11db9b8b7e34feaa02cef6f784dc7e5fda8d86746aff6e9ad2793905986f87dc5af0611e1368d546d0dfbc527ffd637ccb71
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qlTu5x6M1WoDDklJ6qCu5x6M1WoDDklJ1:Qi8kLri8kL7ci8kLri8kL7NPj
- TLSH T1F0D69E42B6E40179E17F4A34D6769632AA77BC460B11D7CF56D0FA2E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry