General
- Target 2026-07-07_1598abc5d0c164932594cd58d312eb06_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 8.2MB
- Sample260707-t2a6faav8l
- SHA256 ce558b9bbebe4e9dbdb92fb423ead15453df8ade69d131643e5d3f5b975dfd0a
- MD5 1598abc5d0c164932594cd58d312eb06
- SHA1 c005ca441e7bbdb57a373345780d94519e84440e
- SHA512 90566eca3e0b13fb697ca897b3ad43369d089d06c34c0464979f6ea30584d20947abcc5e3c36e18d95a43cf105c0865d4dbd276f3fcc77c1fc182adbcbd48a48
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTHu5x6M1uWQtZ/K0tGOFWVRu1:JSWyZ/K0ttYVAATwSWyZ/K0ttYVA1
- TLSH T1A8867C03F1D540E9E059D178CB2A9332EB32BC5A4BB1A5DF2250B6D12E37AD07B39725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_1598abc5d0c164932594cd58d312eb06_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_1598abc5d0c164932594cd58d312eb06_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_1598abc5d0c164932594cd58d312eb06_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 8.2MB
- SHA256 ce558b9bbebe4e9dbdb92fb423ead15453df8ade69d131643e5d3f5b975dfd0a
- MD5 1598abc5d0c164932594cd58d312eb06
- SHA1 c005ca441e7bbdb57a373345780d94519e84440e
- SHA512 90566eca3e0b13fb697ca897b3ad43369d089d06c34c0464979f6ea30584d20947abcc5e3c36e18d95a43cf105c0865d4dbd276f3fcc77c1fc182adbcbd48a48
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTHu5x6M1uWQtZ/K0tGOFWVRu1:JSWyZ/K0ttYVAATwSWyZ/K0ttYVA1
- TLSH T1A8867C03F1D540E9E059D178CB2A9332EB32BC5A4BB1A5DF2250B6D12E37AD07B39725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry