General
- Target 2026-07-15_9d3ae47f0568e151116326a66055b03f_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 15.6MB
- Sample260715-ctlhrscw81
- SHA256 ac814545515cd5f250a876793a6bb9eed26688cb5b1f87e33be72ee23f0d303c
- MD5 9d3ae47f0568e151116326a66055b03f
- SHA1 16b88fc5eebce4c775e3b2ad2c250c816361f59a
- SHA512 d030674d83120aba8aa606fb388ac05019adb993009e292bfc7250a2d08db2adf8cbf3f745a374f271454d892f4a537298acb4f835626c2b243c5501aaf3fcb3
- SSDEEP 196608:Jw7wScITw7wScI6dw7wScITw7wScI6+oK:lYN5YN+o
- TLSH T14FF66C2271E200B6D6999031CF4A933597E1BC698FF187E7B245F7C52F325C07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_9d3ae47f0568e151116326a66055b03f_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_9d3ae47f0568e151116326a66055b03f_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_9d3ae47f0568e151116326a66055b03f_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 15.6MB
- SHA256 ac814545515cd5f250a876793a6bb9eed26688cb5b1f87e33be72ee23f0d303c
- MD5 9d3ae47f0568e151116326a66055b03f
- SHA1 16b88fc5eebce4c775e3b2ad2c250c816361f59a
- SHA512 d030674d83120aba8aa606fb388ac05019adb993009e292bfc7250a2d08db2adf8cbf3f745a374f271454d892f4a537298acb4f835626c2b243c5501aaf3fcb3
- SSDEEP 196608:Jw7wScITw7wScI6dw7wScITw7wScI6+oK:lYN5YN+o
- TLSH T14FF66C2271E200B6D6999031CF4A933597E1BC698FF187E7B245F7C52F325C07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry