General
- Target 2026-07-04_5af13290d1d549feac5dabbd7d697a5c_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 13.5MB
- Sample260704-xe98ssb121
- SHA256 eee572c20c33a0ecc5d2a920bf407cb4f9768570ffa28e4fde539ec47aaeea39
- MD5 5af13290d1d549feac5dabbd7d697a5c
- SHA1 648c8f7e6cc5440c9ec4a6ad906ca269cb76bb32
- SHA512 eeb180bd039ae1a912f2f5ae9aae31e78840b0175e7858ad0ad4d0fe3c150c041f8a928a16012539526e1b1739f85c3a697e286425d7b12d98759b7677c77f9c
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklb+YPppCpU2hBJ6qCu5x6M1WoDDklb+YPppK:Qi8kLri8kb2Vhfri8kb2Vh
- TLSH T104E69F03F6E540ADE06AC53497669632EA72FC460721D7CF1690B65A2F73BC09B39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_5af13290d1d549feac5dabbd7d697a5c_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_5af13290d1d549feac5dabbd7d697a5c_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_5af13290d1d549feac5dabbd7d697a5c_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 13.5MB
- SHA256 eee572c20c33a0ecc5d2a920bf407cb4f9768570ffa28e4fde539ec47aaeea39
- MD5 5af13290d1d549feac5dabbd7d697a5c
- SHA1 648c8f7e6cc5440c9ec4a6ad906ca269cb76bb32
- SHA512 eeb180bd039ae1a912f2f5ae9aae31e78840b0175e7858ad0ad4d0fe3c150c041f8a928a16012539526e1b1739f85c3a697e286425d7b12d98759b7677c77f9c
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklb+YPppCpU2hBJ6qCu5x6M1WoDDklb+YPppK:Qi8kLri8kb2Vhfri8kb2Vh
- TLSH T104E69F03F6E540ADE06AC53497669632EA72FC460721D7CF1690B65A2F73BC09B39723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry