General
- Target 2026-07-12_8a313d2df27e2d64c6b965bc303ecd12_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 4.7MB
- Sample260712-plwpzshy3p
- SHA256 6df65aba12085bbad15a9a94f9b5e3c4cc25997a547c461e3d2cbf04d923a03b
- MD5 8a313d2df27e2d64c6b965bc303ecd12
- SHA1 b0fa857a686b4d24be02dbf5a8ebdc167f460b25
- SHA512 ff2a3141d07bf40f110a9f476f00027eb46db68fc60bd6c9c9b87b3c7a18b7b8bf5c2156cfef1f0ae7ef22cf3e8bc4f7e0191de890bc7a66611d2a59448aff1d
- SSDEEP 49152:tYRw5x6M1HVO88hXl+tGbqVXLdwAwIPCwQ/gyp0vEJOQj4qiw3PASW9mMtO:Su5x6M1c/h1+tZzPBpgPALO
- TLSH T17A369D17F2D541E9D06AC0748686A232FA72BC461B30A6DF0791F7552F37AE09B3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_8a313d2df27e2d64c6b965bc303ecd12_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_8a313d2df27e2d64c6b965bc303ecd12_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_8a313d2df27e2d64c6b965bc303ecd12_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 4.7MB
- SHA256 6df65aba12085bbad15a9a94f9b5e3c4cc25997a547c461e3d2cbf04d923a03b
- MD5 8a313d2df27e2d64c6b965bc303ecd12
- SHA1 b0fa857a686b4d24be02dbf5a8ebdc167f460b25
- SHA512 ff2a3141d07bf40f110a9f476f00027eb46db68fc60bd6c9c9b87b3c7a18b7b8bf5c2156cfef1f0ae7ef22cf3e8bc4f7e0191de890bc7a66611d2a59448aff1d
- SSDEEP 49152:tYRw5x6M1HVO88hXl+tGbqVXLdwAwIPCwQ/gyp0vEJOQj4qiw3PASW9mMtO:Su5x6M1c/h1+tZzPBpgPALO
- TLSH T17A369D17F2D541E9D06AC0748686A232FA72BC461B30A6DF0791F7552F37AE09B3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry