General
- Target 2026-07-06_a8b6e36117c0cc1ffe9b11a6d1a6a945_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 13.6MB
- Sample260706-weksgaev8j
- SHA256 6f7f0c2409c32132dadb412018b120a96e032d23139cd2570e04f5b12bde8dba
- MD5 a8b6e36117c0cc1ffe9b11a6d1a6a945
- SHA1 02845b51af9393a94db4ef2f64a245088ee9e6a1
- SHA512 c5507b539014ed61f2e3bd6577018f7fd585f06e787c1ba9f5a1ac49b0b3c1e04dab8dfffbcfeb8ff48c7f7feaec2304a06e27bf9a6941f093125288925570a5
- SSDEEP 98304:Su5x6M1Y0oAaldmdmnpgu5x6M1Y0oAaldmdmnpQmu5x6M1Y0oAaldmdmnpgu5x6P:JhKmd0hhKmd0q9hKmd0hhKmd0qe/
- TLSH T136E66B03A19544E9D299C034CE4AD235EB22BC4D47F1A6FB3690BAD53E37AD03B3A715
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_a8b6e36117c0cc1ffe9b11a6d1a6a945_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_a8b6e36117c0cc1ffe9b11a6d1a6a945_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_a8b6e36117c0cc1ffe9b11a6d1a6a945_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 13.6MB
- SHA256 6f7f0c2409c32132dadb412018b120a96e032d23139cd2570e04f5b12bde8dba
- MD5 a8b6e36117c0cc1ffe9b11a6d1a6a945
- SHA1 02845b51af9393a94db4ef2f64a245088ee9e6a1
- SHA512 c5507b539014ed61f2e3bd6577018f7fd585f06e787c1ba9f5a1ac49b0b3c1e04dab8dfffbcfeb8ff48c7f7feaec2304a06e27bf9a6941f093125288925570a5
- SSDEEP 98304:Su5x6M1Y0oAaldmdmnpgu5x6M1Y0oAaldmdmnpQmu5x6M1Y0oAaldmdmnpgu5x6P:JhKmd0hhKmd0q9hKmd0hhKmd0qe/
- TLSH T136E66B03A19544E9D299C034CE4AD235EB22BC4D47F1A6FB3690BAD53E37AD03B3A715
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry