General
- Target 2026-07-15_52ed6c5f53b062613cec81f48b7d1dfa_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 7.0MB
- Sample260715-dc76waat2m
- SHA256 a7183e624f66c33a023d4d27e5a6d029cb89adecb03ba9e6c40d3a80c414285c
- MD5 52ed6c5f53b062613cec81f48b7d1dfa
- SHA1 3296f71ff4e6cc3fe104913f4d039c2103d3a964
- SHA512 199057d76f843a4706334d2a57cfc45e528798ae182cd5577f2038d5ae8eb70ceed1512e7dd2dd7eed20426e77ea31716f08ab4dbfe5990241096a57665e8b74
- SSDEEP 98304:Su5x6M1cIu5x6M1cSLapIAu5x6M1cIu5x6M1cSLapI6D:Jw7wScITw7wScI6D
- TLSH T15A765B6271E240B6C6999031CF49A33597E17C698BF1C7E7B206F7C52F325C07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_52ed6c5f53b062613cec81f48b7d1dfa_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_52ed6c5f53b062613cec81f48b7d1dfa_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_52ed6c5f53b062613cec81f48b7d1dfa_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 7.0MB
- SHA256 a7183e624f66c33a023d4d27e5a6d029cb89adecb03ba9e6c40d3a80c414285c
- MD5 52ed6c5f53b062613cec81f48b7d1dfa
- SHA1 3296f71ff4e6cc3fe104913f4d039c2103d3a964
- SHA512 199057d76f843a4706334d2a57cfc45e528798ae182cd5577f2038d5ae8eb70ceed1512e7dd2dd7eed20426e77ea31716f08ab4dbfe5990241096a57665e8b74
- SSDEEP 98304:Su5x6M1cIu5x6M1cSLapIAu5x6M1cIu5x6M1cSLapI6D:Jw7wScITw7wScI6D
- TLSH T15A765B6271E240B6C6999031CF49A33597E17C698BF1C7E7B206F7C52F325C07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry