General
- Target 2026-07-01_0c28b5121387a9194643a75782dcecee_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 27.3MB
- Sample260702-ar22magy3j
- SHA256 54f08848072cde2fdd8f7cba4ba00ecd794005267af5f7289331db251f455450
- MD5 0c28b5121387a9194643a75782dcecee
- SHA1 5a49b371359ce3f6e91a6197f89abb6efec75bd3
- SHA512 a57307713f096af034f75195c3f497efa06626d1f0775dbf2c502829c2e9988bc16af0df98f2af350f195e9f8f6e447c1959c87f952b4211b12730f48869a9c0
- SSDEEP 196608:Qi8kLri8kL7ci8kLri8kL7oi8kLri8kL7ci8kLri8kL76oK:IkLDkL7EkLDkL7QkLDkL7EkLDkL76o
- TLSH T16E578E02B7E40079F17E8A34D6769632AA76BC560B21D6CF56D4F61E1E32BC09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_0c28b5121387a9194643a75782dcecee_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_0c28b5121387a9194643a75782dcecee_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_0c28b5121387a9194643a75782dcecee_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 27.3MB
- SHA256 54f08848072cde2fdd8f7cba4ba00ecd794005267af5f7289331db251f455450
- MD5 0c28b5121387a9194643a75782dcecee
- SHA1 5a49b371359ce3f6e91a6197f89abb6efec75bd3
- SHA512 a57307713f096af034f75195c3f497efa06626d1f0775dbf2c502829c2e9988bc16af0df98f2af350f195e9f8f6e447c1959c87f952b4211b12730f48869a9c0
- SSDEEP 196608:Qi8kLri8kL7ci8kLri8kL7oi8kLri8kL7ci8kLri8kL76oK:IkLDkL7EkLDkL7QkLDkL7EkLDkL76o
- TLSH T16E578E02B7E40079F17E8A34D6769632AA76BC560B21D6CF56D4F61E1E32BC09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry