General
- Target 2026-07-06_3929886992ee122c0daba4c36ccf60c8_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 17.6MB
- Sample260706-1xca9shw2m
- SHA256 7ccf07057d3773f2d60c0a8d5b5e9519302c131679d314b0f853ae9c60ac9d70
- MD5 3929886992ee122c0daba4c36ccf60c8
- SHA1 4a77e9de2e173677df176d6500032c5857dbc989
- SHA512 0ff3a7cf556353db7e4b417463cbad94495be615b774763c68a987dd9bc765b1378d84d0f3ec11ef84e17c3a971e93a0337a754786e530461da5b4290844b561
- SSDEEP 196608:Qi8kLri8kb2Vhfri8kb2VhGvyEYc/b3w8O:IkLDkbedDkbeYvyEYKbi
- TLSH T10A178E02B7E440E9E06AC53496769632EA72BC460B31E7CF0690F65E2F737D05E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_3929886992ee122c0daba4c36ccf60c8_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_3929886992ee122c0daba4c36ccf60c8_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_3929886992ee122c0daba4c36ccf60c8_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 17.6MB
- SHA256 7ccf07057d3773f2d60c0a8d5b5e9519302c131679d314b0f853ae9c60ac9d70
- MD5 3929886992ee122c0daba4c36ccf60c8
- SHA1 4a77e9de2e173677df176d6500032c5857dbc989
- SHA512 0ff3a7cf556353db7e4b417463cbad94495be615b774763c68a987dd9bc765b1378d84d0f3ec11ef84e17c3a971e93a0337a754786e530461da5b4290844b561
- SSDEEP 196608:Qi8kLri8kb2Vhfri8kb2VhGvyEYc/b3w8O:IkLDkbedDkbeYvyEYKbi
- TLSH T10A178E02B7E440E9E06AC53496769632EA72BC460B31E7CF0690F65E2F737D05E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application