General
- Target 2026-07-01_37180c745883f6406b5858dcf38696b8_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 15.6MB
- Sample260701-q2rawafw5k
- SHA256 3be421fe466699a341d9238f5f1c5d0129bb0f947ed1de56f67de8fe6b0d071b
- MD5 37180c745883f6406b5858dcf38696b8
- SHA1 a1fa451e16020cb8c5fb7cf3888b49ba72fe396a
- SHA512 34d19d4dd33298179c2565041fdc467662aaf42a717a55f3b150948f8bf7e46ff4f104421636dc61d476d29bdc8621278504d282040028513cac847f7cb1d6b9
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6q7GgHIKgM/u5x6M1WoDDklJ6qCu5x6M1k:Qi8kLri8kL5oKmi8kLri8kL5oKyIb
- TLSH T11AF69F03B7D500B9E16E863496769532EA72BC460B21E6CF5794F61E2E73BC09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_37180c745883f6406b5858dcf38696b8_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_37180c745883f6406b5858dcf38696b8_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_37180c745883f6406b5858dcf38696b8_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 15.6MB
- SHA256 3be421fe466699a341d9238f5f1c5d0129bb0f947ed1de56f67de8fe6b0d071b
- MD5 37180c745883f6406b5858dcf38696b8
- SHA1 a1fa451e16020cb8c5fb7cf3888b49ba72fe396a
- SHA512 34d19d4dd33298179c2565041fdc467662aaf42a717a55f3b150948f8bf7e46ff4f104421636dc61d476d29bdc8621278504d282040028513cac847f7cb1d6b9
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6q7GgHIKgM/u5x6M1WoDDklJ6qCu5x6M1k:Qi8kLri8kL5oKmi8kLri8kL5oKyIb
- TLSH T11AF69F03B7D500B9E16E863496769532EA72BC460B21E6CF5794F61E2E73BC09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry