General
- Target 2026-07-02_a227018b9948ee0fa52760ccb1513924_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar
- Size 25.4MB
- Sample260702-gr64xact6y
- SHA256 62c444682db33e2cfd6557c2391c9f0d836f353ad422f261e38f62004a5291a4
- MD5 a227018b9948ee0fa52760ccb1513924
- SHA1 3e2488664f3fe901dafad12e060780d79ff8a3be
- SHA512 0e6c33a1dc56ac988980b4baa48a76aaef64b010918f4a4f0e66c82c8f2a152fb9c1b1d2909d33c0a11f7321841df8005d4d09c20c3e29735571361a67349b77
- SSDEEP 196608:Qi8kLri8kL7ci8kLri8kL7NRi8kLri8kL7ci8kLri8kL7NC:IkLDkL7EkLDkL7fkLDkL7EkLDkL70
- TLSH T1C3479E42B6E40179E17F4A34D6769632AA77BC460B11D7CF56D0FA2E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_a227018b9948ee0fa52760ccb1513924_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_a227018b9948ee0fa52760ccb1513924_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_a227018b9948ee0fa52760ccb1513924_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar
- Size 25.4MB
- SHA256 62c444682db33e2cfd6557c2391c9f0d836f353ad422f261e38f62004a5291a4
- MD5 a227018b9948ee0fa52760ccb1513924
- SHA1 3e2488664f3fe901dafad12e060780d79ff8a3be
- SHA512 0e6c33a1dc56ac988980b4baa48a76aaef64b010918f4a4f0e66c82c8f2a152fb9c1b1d2909d33c0a11f7321841df8005d4d09c20c3e29735571361a67349b77
- SSDEEP 196608:Qi8kLri8kL7ci8kLri8kL7NRi8kLri8kL7ci8kLri8kL7NC:IkLDkL7EkLDkL7fkLDkL7EkLDkL70
- TLSH T1C3479E42B6E40179E17F4A34D6769632AA77BC460B11D7CF56D0FA2E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry