General
- Target 2026-07-12_5a700f046a6483723a4451798d64930a_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 4.6MB
- Sample260712-qdgfrsct8w
- SHA256 e3ed79cf2aba295da29571b643773db12d86686e209f1c7cf793063ec669b492
- MD5 5a700f046a6483723a4451798d64930a
- SHA1 a21638fd970a64223a03a3e4c923c75f32c20447
- SHA512 fee1eda9cbf39f009dcb48ed968d3c33746332f47edd3c589a7febfb694b0c79d4fd2c77920dd4a1cc8c113e733a287bb98320f7ea662d0fd4d6480bb1332b3b
- SSDEEP 98304:Su5x6M1c/h1+o6u5x6M1c/h1+o0GgHIKgM:Jw/h1+oxw/h1+o6oK
- TLSH T183268D56F69481F5D06AC174C586A736EA727C421B309BCB4342FB682F376D09E3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_5a700f046a6483723a4451798d64930a_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_5a700f046a6483723a4451798d64930a_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_5a700f046a6483723a4451798d64930a_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 4.6MB
- SHA256 e3ed79cf2aba295da29571b643773db12d86686e209f1c7cf793063ec669b492
- MD5 5a700f046a6483723a4451798d64930a
- SHA1 a21638fd970a64223a03a3e4c923c75f32c20447
- SHA512 fee1eda9cbf39f009dcb48ed968d3c33746332f47edd3c589a7febfb694b0c79d4fd2c77920dd4a1cc8c113e733a287bb98320f7ea662d0fd4d6480bb1332b3b
- SSDEEP 98304:Su5x6M1c/h1+o6u5x6M1c/h1+o0GgHIKgM:Jw/h1+oxw/h1+o6oK
- TLSH T183268D56F69481F5D06AC174C586A736EA727C421B309BCB4342FB682F376D09E3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry