General
- Target 2026-07-10_9500a6929a2c8035c4eec93d6a507c4e_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 8.1MB
- Sample260710-v6h8aadw7p
- SHA256 7f61252a0d18376e7406e17de5b6ad1761355d886b05cab375eda4ad93da6694
- MD5 9500a6929a2c8035c4eec93d6a507c4e
- SHA1 e59b613cbc7e16c7b58c6dd7702320f373f92e05
- SHA512 548668d73e808091759938600abc42d551318aa0f222fd2d354e97c7d42f628fed56c719198aeb5b7f9f17d98f0519183b40042e47d73a36541ed235c7d8801a
- SSDEEP 98304:Su5x6M1WoDIu5x6M1WoDemWQtZ/K0tGOFWVRuLftCT:JiYiVmWyZ/K0ttYVAAT
- TLSH T10B867D03F2E440A9E1AED174CA3597319B72BC564BF1A6DF2280B6D51E32BD07B35722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_9500a6929a2c8035c4eec93d6a507c4e_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_9500a6929a2c8035c4eec93d6a507c4e_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_9500a6929a2c8035c4eec93d6a507c4e_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 8.1MB
- SHA256 7f61252a0d18376e7406e17de5b6ad1761355d886b05cab375eda4ad93da6694
- MD5 9500a6929a2c8035c4eec93d6a507c4e
- SHA1 e59b613cbc7e16c7b58c6dd7702320f373f92e05
- SHA512 548668d73e808091759938600abc42d551318aa0f222fd2d354e97c7d42f628fed56c719198aeb5b7f9f17d98f0519183b40042e47d73a36541ed235c7d8801a
- SSDEEP 98304:Su5x6M1WoDIu5x6M1WoDemWQtZ/K0tGOFWVRuLftCT:JiYiVmWyZ/K0ttYVAAT
- TLSH T10B867D03F2E440A9E1AED174CA3597319B72BC564BF1A6DF2280B6D51E32BD07B35722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry