General
- Target 2026-07-09_2ea19b6812d7c2c12e9d1bf605c776e3_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 9.5MB
- Sample260709-wdsfxsfx4t
- SHA256 8a640d1084bcf23da56c7669813c0d19b81b4ffa3f9e2da2383db0a2d791f32b
- MD5 2ea19b6812d7c2c12e9d1bf605c776e3
- SHA1 7299ad2db57707da761b497868a4d8677a0bf2e0
- SHA512 9424e59bc818e3602f61976c86a34a9d26c3331407521f4b92708884f6692ed4b61023ce0686daeb3b1433936a7be92a2ed4ceb991a107240a54255b5abbdf1f
- SSDEEP 98304:Su5x6M1c/h1+a0oAaldmdmnpgu5x6M1c/h1+a0oAaldmdmnpWLapI9:Jw/h1+vKmd0hw/h1+vKmd08cI9
- TLSH T1DAA66B13B1A140A9D199C034CF46D235E7B27C594BF196EB3281BBD92E33AD07B3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_2ea19b6812d7c2c12e9d1bf605c776e3_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_2ea19b6812d7c2c12e9d1bf605c776e3_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_2ea19b6812d7c2c12e9d1bf605c776e3_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 9.5MB
- SHA256 8a640d1084bcf23da56c7669813c0d19b81b4ffa3f9e2da2383db0a2d791f32b
- MD5 2ea19b6812d7c2c12e9d1bf605c776e3
- SHA1 7299ad2db57707da761b497868a4d8677a0bf2e0
- SHA512 9424e59bc818e3602f61976c86a34a9d26c3331407521f4b92708884f6692ed4b61023ce0686daeb3b1433936a7be92a2ed4ceb991a107240a54255b5abbdf1f
- SSDEEP 98304:Su5x6M1c/h1+a0oAaldmdmnpgu5x6M1c/h1+a0oAaldmdmnpWLapI9:Jw/h1+vKmd0hw/h1+vKmd08cI9
- TLSH T1DAA66B13B1A140A9D199C034CF46D235E7B27C594BF196EB3281BBD92E33AD07B3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry