General
- Target 2026-07-10_b44210ee4e37dcc2c94dba3bc679446a_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 7.9MB
- Sample260710-vzbjvsdv2m
- SHA256 ffc37667cb1be3d5f02748794d26eb75c22edd947d2ddae4378c082b614c7c15
- MD5 b44210ee4e37dcc2c94dba3bc679446a
- SHA1 eed89fd07251623783857e38eea76e529132e096
- SHA512 f194ed7396aa1ed0c86d59c84654e72daba54f99048ee31a623cbf07db83930b286b76de394e26410f9a9d8ff6ddc70648981b1264cee8208c835316e6f2bbdb
- SSDEEP 98304:Su5x6M1c/h1+a0oAaldmdmnpgu5x6M1c/h1+a0oAaldmdmnpmb:Jw/h1+vKmd0hw/h1+vKmd0Yb
- TLSH T1D6866B13B19440E9D166C034CE86D236EB727C4957F196EB3281BBD92E37AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_b44210ee4e37dcc2c94dba3bc679446a_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_b44210ee4e37dcc2c94dba3bc679446a_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_b44210ee4e37dcc2c94dba3bc679446a_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 7.9MB
- SHA256 ffc37667cb1be3d5f02748794d26eb75c22edd947d2ddae4378c082b614c7c15
- MD5 b44210ee4e37dcc2c94dba3bc679446a
- SHA1 eed89fd07251623783857e38eea76e529132e096
- SHA512 f194ed7396aa1ed0c86d59c84654e72daba54f99048ee31a623cbf07db83930b286b76de394e26410f9a9d8ff6ddc70648981b1264cee8208c835316e6f2bbdb
- SSDEEP 98304:Su5x6M1c/h1+a0oAaldmdmnpgu5x6M1c/h1+a0oAaldmdmnpmb:Jw/h1+vKmd0hw/h1+vKmd0Yb
- TLSH T1D6866B13B19440E9D166C034CE86D236EB727C4957F196EB3281BBD92E37AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry