General
- Target 2026-07-02_15c27b428d97a7d139dbcfa4d69747ac_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar
- Size 25.2MB
- Sample260702-jsxb7set3y
- SHA256 79fa7d9324517ff31b725157296a9feb603616e7225d339ea97bb28d72c74cf7
- MD5 15c27b428d97a7d139dbcfa4d69747ac
- SHA1 42647592b9ea78ecd857b99b8ea7da89952bf1da
- SHA512 0d9145f316aa4388ba1db1809a7ce637b8c6d6234d73fd5169e91b97dbe6622e9c03270fb938632a144865595e23cbfe4e6ae0f4d343503fad132bcdb2fcc32f
- SSDEEP 196608:Qi8kLri8kL7ci8kLri8kL7gi8kLri8kL7ci8kLri8kL76:IkLDkL7EkLDkL7YkLDkL7EkLDkL76
- TLSH T1ED479E42B7E4007AF17E4A34D6769632AA76BC460B11D7CF56D4F62E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_15c27b428d97a7d139dbcfa4d69747ac_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_15c27b428d97a7d139dbcfa4d69747ac_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_15c27b428d97a7d139dbcfa4d69747ac_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar
- Size 25.2MB
- SHA256 79fa7d9324517ff31b725157296a9feb603616e7225d339ea97bb28d72c74cf7
- MD5 15c27b428d97a7d139dbcfa4d69747ac
- SHA1 42647592b9ea78ecd857b99b8ea7da89952bf1da
- SHA512 0d9145f316aa4388ba1db1809a7ce637b8c6d6234d73fd5169e91b97dbe6622e9c03270fb938632a144865595e23cbfe4e6ae0f4d343503fad132bcdb2fcc32f
- SSDEEP 196608:Qi8kLri8kL7ci8kLri8kL7gi8kLri8kL7ci8kLri8kL76:IkLDkL7EkLDkL7YkLDkL7EkLDkL76
- TLSH T1ED479E42B7E4007AF17E4A34D6769632AA76BC460B11D7CF56D4F62E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry