General
- Target 2026-07-02_3c3ccd0b3c4a174bac5b2268cd0d387b_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar
- Size 25.3MB
- Sample260702-g897wsbv8m
- SHA256 aa88b368cefe1b6fb5e726be66e358349a29d947e200b1bc64c3103aa701f9f3
- MD5 3c3ccd0b3c4a174bac5b2268cd0d387b
- SHA1 7a43d0e7ae3ed4303bc32c412b42040904f8697b
- SHA512 16259ae2b256b746a26d5d3c0fce2c7db35ec09b78ffcf445ecea269d7079ded71782888d7cb4afe9c04608402981f5c1490636c4e79e919b832b6da5ee82bba
- SSDEEP 196608:Qi8kLri8kL7ci8kLri8kL7gi8kLri8kL7ci8kLri8kL76:IkLDkL7EkLDkL7YkLDkL7EkLDkL76
- TLSH T1D8479E42B7E4007AE17E4A34D6769632AA77BC460B51D7CF56D0F62E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_3c3ccd0b3c4a174bac5b2268cd0d387b_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_3c3ccd0b3c4a174bac5b2268cd0d387b_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_3c3ccd0b3c4a174bac5b2268cd0d387b_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar
- Size 25.3MB
- SHA256 aa88b368cefe1b6fb5e726be66e358349a29d947e200b1bc64c3103aa701f9f3
- MD5 3c3ccd0b3c4a174bac5b2268cd0d387b
- SHA1 7a43d0e7ae3ed4303bc32c412b42040904f8697b
- SHA512 16259ae2b256b746a26d5d3c0fce2c7db35ec09b78ffcf445ecea269d7079ded71782888d7cb4afe9c04608402981f5c1490636c4e79e919b832b6da5ee82bba
- SSDEEP 196608:Qi8kLri8kL7ci8kLri8kL7gi8kLri8kL7ci8kLri8kL76:IkLDkL7EkLDkL7YkLDkL7EkLDkL76
- TLSH T1D8479E42B7E4007AE17E4A34D6769632AA77BC460B51D7CF56D0F62E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application