General
- Target 2026-07-06_bf7d438572e96680996ef39bde070433_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- Sample260706-cfl75sg19v
- SHA256 d9ad809f24e61e9de01ae2ddee4d2dd55bba6d26dbbfaabf8c9c33f53e9c52e8
- MD5 bf7d438572e96680996ef39bde070433
- SHA1 f62280bb21b8b955d4d5b53c57ccf1884f10c3c9
- SHA512 6db8f7df04fa5c7f61352bde06a005d6b1a03a21b01590ea8d9e161b0235c2496cdd2c90cfe7eb43eb2818817d98a58e45ad361755de8d074c4008f368d2bdeb
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXt:GDVmpzSi/RyhdshPmiuWXt
- TLSH T1A6947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_bf7d438572e96680996ef39bde070433_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_bf7d438572e96680996ef39bde070433_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win11ltsc2024-20260630-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_bf7d438572e96680996ef39bde070433_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- SHA256 d9ad809f24e61e9de01ae2ddee4d2dd55bba6d26dbbfaabf8c9c33f53e9c52e8
- MD5 bf7d438572e96680996ef39bde070433
- SHA1 f62280bb21b8b955d4d5b53c57ccf1884f10c3c9
- SHA512 6db8f7df04fa5c7f61352bde06a005d6b1a03a21b01590ea8d9e161b0235c2496cdd2c90cfe7eb43eb2818817d98a58e45ad361755de8d074c4008f368d2bdeb
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXt:GDVmpzSi/RyhdshPmiuWXt
- TLSH T1A6947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory