General
- Target 2026-07-09_55394ceb2752b72df5fce7942972883e_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 3.1MB
- Sample260709-kh2dvaf19z
- SHA256 04f24b2b3ae3230fd2f8ca7bcf1a5260ee396e63d0ec5b50676185336190676a
- MD5 55394ceb2752b72df5fce7942972883e
- SHA1 d7f569abc9c438d2256db46d5849c4648aa3250a
- SHA512 3296910228e94c8f1ae57b9156facfe2ab3d1cb60cde967e99296a1075be709325782948fffb65d45d65f3b1ea932a28fa2a5a19e3b71794d143f0c6ef49f9ad
- SSDEEP 49152:tYRw5x6M1HVO88hXl+JgjI45TMwwapIgTUk:Su5x6M1c/h1+HLapINk
- TLSH T106E53A2271E200A6C1999031CF869735D7E17C698BF1C7E7B205B7D92F725C07A3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_55394ceb2752b72df5fce7942972883e_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_55394ceb2752b72df5fce7942972883e_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_55394ceb2752b72df5fce7942972883e_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 3.1MB
- SHA256 04f24b2b3ae3230fd2f8ca7bcf1a5260ee396e63d0ec5b50676185336190676a
- MD5 55394ceb2752b72df5fce7942972883e
- SHA1 d7f569abc9c438d2256db46d5849c4648aa3250a
- SHA512 3296910228e94c8f1ae57b9156facfe2ab3d1cb60cde967e99296a1075be709325782948fffb65d45d65f3b1ea932a28fa2a5a19e3b71794d143f0c6ef49f9ad
- SSDEEP 49152:tYRw5x6M1HVO88hXl+JgjI45TMwwapIgTUk:Su5x6M1c/h1+HLapINk
- TLSH T106E53A2271E200A6C1999031CF869735D7E17C698BF1C7E7B205B7D92F725C07A3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry