General
- Target 2026-07-12_5fb92424d7a8a4a1d300b8e4097bf7da_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 5.9MB
- Sample260712-qapb7sct2w
- SHA256 5152861b2d70ca6f2b0938b4e5f4fcf1064b506bceada1c0974822baea0f9dd2
- MD5 5fb92424d7a8a4a1d300b8e4097bf7da
- SHA1 5ce3e8f7c86d4678191859c99440fc445c347a84
- SHA512 fb5e3e3f1bbb710cd7eb7ff5f7bc153e8e54beb08b2b177a15ff4878a6876d0fdaf6000e69532fbc7a5ab6626076e85711500a637080a5c10eb6ff96da56d60f
- SSDEEP 98304:Su5x6M1cIu5x6M1cIq9ceq9+2xl/SSay+:Jw7wIWqQI0py+
- TLSH T17E568E03F2E540E9E0AAD27496756332EE72BC466B30A6CF1340BB151E77AD05F39762
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_5fb92424d7a8a4a1d300b8e4097bf7da_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_5fb92424d7a8a4a1d300b8e4097bf7da_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_5fb92424d7a8a4a1d300b8e4097bf7da_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 5.9MB
- SHA256 5152861b2d70ca6f2b0938b4e5f4fcf1064b506bceada1c0974822baea0f9dd2
- MD5 5fb92424d7a8a4a1d300b8e4097bf7da
- SHA1 5ce3e8f7c86d4678191859c99440fc445c347a84
- SHA512 fb5e3e3f1bbb710cd7eb7ff5f7bc153e8e54beb08b2b177a15ff4878a6876d0fdaf6000e69532fbc7a5ab6626076e85711500a637080a5c10eb6ff96da56d60f
- SSDEEP 98304:Su5x6M1cIu5x6M1cIq9ceq9+2xl/SSay+:Jw7wIWqQI0py+
- TLSH T17E568E03F2E540E9E0AAD27496756332EE72BC466B30A6CF1340BB151E77AD05F39762
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry