General
- Target 2026-07-14_6f2c2d5d305d0ffb9f7b4a6ee002da7a_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 14.1MB
- Sample260714-vdcj2abx5z
- SHA256 7f3550a84360c05e555f656b80e151fe49753a03b70e482ee620ea33f718ada4
- MD5 6f2c2d5d305d0ffb9f7b4a6ee002da7a
- SHA1 f1ac7e90e6baa5b7d22d03c31189c7e1d83739c0
- SHA512 082b575bdd8ac2f7339aec879952b4a11962367e6c0dd500c6aaf89e20bf6df3588dc19a69ba4861b5656bdbc095d9b4d6e1e3bd55213c677ba45287fee3855a
- SSDEEP 98304:Su5x6M1cIu5x6M1cSLapIAu5x6M1cIu5x6M1cSLapI6Gu5x6M1cIu5x6M1cSLapB:Jw7wScITw7wScI6dw7wScITw7wScI6kD
- TLSH T1D9E65C6271E200B6D6999031CF49933597E1BC698BF1C7E7B206F7C52F325C07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_6f2c2d5d305d0ffb9f7b4a6ee002da7a_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_6f2c2d5d305d0ffb9f7b4a6ee002da7a_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_6f2c2d5d305d0ffb9f7b4a6ee002da7a_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 14.1MB
- SHA256 7f3550a84360c05e555f656b80e151fe49753a03b70e482ee620ea33f718ada4
- MD5 6f2c2d5d305d0ffb9f7b4a6ee002da7a
- SHA1 f1ac7e90e6baa5b7d22d03c31189c7e1d83739c0
- SHA512 082b575bdd8ac2f7339aec879952b4a11962367e6c0dd500c6aaf89e20bf6df3588dc19a69ba4861b5656bdbc095d9b4d6e1e3bd55213c677ba45287fee3855a
- SSDEEP 98304:Su5x6M1cIu5x6M1cSLapIAu5x6M1cIu5x6M1cSLapI6Gu5x6M1cIu5x6M1cSLapB:Jw7wScITw7wScI6dw7wScITw7wScI6kD
- TLSH T1D9E65C6271E200B6D6999031CF49933597E1BC698BF1C7E7B206F7C52F325C07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry