General
- Target 2026-07-07_29cd078ee7c1e4c4df334b5aacc44173_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 18.6MB
- Sample260707-qpbdwsfz2l
- SHA256 6e08933975b0cd67563f23becfe465a49cdd03a1e35f549d39a9a7c58b06fd1e
- MD5 29cd078ee7c1e4c4df334b5aacc44173
- SHA1 2f731be064d03e54d68b056beba7e28521d157b9
- SHA512 3643a85bd4976b4fc90316a246792291b9f9204178a25be49696c58a0517e0c0fc4c941ae63f96db32920fdd84e4d810d6b286455de584076b6582504b761fae
- SSDEEP 393216:ayZ/K0ttYZT/vyEYKblyZ/K0ttYZT/vyEYKbl:ayZ/K0ttYZT3byZ/K0ttYZT3/
- TLSH T14C175C12F6E440F5E06AD134CA768631FB727C064BB1A6DF1190E6AD2F336D06E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_29cd078ee7c1e4c4df334b5aacc44173_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_29cd078ee7c1e4c4df334b5aacc44173_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_29cd078ee7c1e4c4df334b5aacc44173_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 18.6MB
- SHA256 6e08933975b0cd67563f23becfe465a49cdd03a1e35f549d39a9a7c58b06fd1e
- MD5 29cd078ee7c1e4c4df334b5aacc44173
- SHA1 2f731be064d03e54d68b056beba7e28521d157b9
- SHA512 3643a85bd4976b4fc90316a246792291b9f9204178a25be49696c58a0517e0c0fc4c941ae63f96db32920fdd84e4d810d6b286455de584076b6582504b761fae
- SSDEEP 393216:ayZ/K0ttYZT/vyEYKblyZ/K0ttYZT/vyEYKbl:ayZ/K0ttYZT3byZ/K0ttYZT3/
- TLSH T14C175C12F6E440F5E06AD134CA768631FB727C064BB1A6DF1190E6AD2F336D06E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry