General
- Target 2026-07-15_5c2cef55cd8fd7696e9f8a1c66561615_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 18.3MB
- Sample260715-dbf11aas6r
- SHA256 0db3264c8ee5efcd4608380550ef496b9663b97d00de3272ae8549cccea923e2
- MD5 5c2cef55cd8fd7696e9f8a1c66561615
- SHA1 271754137f48ae0a3d02cab92551c2c277437d5e
- SHA512 ea3eddaed56c23328aecef030decfa67aea2e9b4152146630497b2a2253653745a519edd1a3c1391b46e5868d6774dc2d53c7a00d4dee34e2f49a07cf341c570
- SSDEEP 196608:Jw/h1+Tlw/h1+TWoKLw/h1+Tlw/h1+TWoKy:So1oh
- TLSH T12C178C13F2D541E9D06AC174868AA233EA72BC451B30A6DF0791F7552F37AE09B3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_5c2cef55cd8fd7696e9f8a1c66561615_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_5c2cef55cd8fd7696e9f8a1c66561615_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_5c2cef55cd8fd7696e9f8a1c66561615_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 18.3MB
- SHA256 0db3264c8ee5efcd4608380550ef496b9663b97d00de3272ae8549cccea923e2
- MD5 5c2cef55cd8fd7696e9f8a1c66561615
- SHA1 271754137f48ae0a3d02cab92551c2c277437d5e
- SHA512 ea3eddaed56c23328aecef030decfa67aea2e9b4152146630497b2a2253653745a519edd1a3c1391b46e5868d6774dc2d53c7a00d4dee34e2f49a07cf341c570
- SSDEEP 196608:Jw/h1+Tlw/h1+TWoKLw/h1+Tlw/h1+TWoKy:So1oh
- TLSH T12C178C13F2D541E9D06AC174868AA233EA72BC451B30A6DF0791F7552F37AE09B3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry