General
- Target 2026-07-15_5121ed37079a19e453268e823e4f830f_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 7.0MB
- Sample260715-ddpe6ads2t
- SHA256 ffe1d01c58a19571f67b92f8efb6244fbeaf695e0b4dd4efb5b6543b6b000593
- MD5 5121ed37079a19e453268e823e4f830f
- SHA1 25a6a1bca8fe3a8c6ebab801a574273643309c25
- SHA512 ae39593918c2fbd129d56a338aefe35ea6347b5386ca39928a64dcc0a24cf78b4e61614f7c61524cfcb4bf1001be6753e2d5c4279e1d0f28e0ccd26808e5c6ff
- SSDEEP 98304:Su5x6M1cIu5x6M1cSLapIAu5x6M1cIu5x6M1cSLapIGb:Jw7wScITw7wScIGb
- TLSH T175765B6271E200B6C6999031CF49A33597E17C699FF1C7E7B206F6C52F325C07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_5121ed37079a19e453268e823e4f830f_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_5121ed37079a19e453268e823e4f830f_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_5121ed37079a19e453268e823e4f830f_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 7.0MB
- SHA256 ffe1d01c58a19571f67b92f8efb6244fbeaf695e0b4dd4efb5b6543b6b000593
- MD5 5121ed37079a19e453268e823e4f830f
- SHA1 25a6a1bca8fe3a8c6ebab801a574273643309c25
- SHA512 ae39593918c2fbd129d56a338aefe35ea6347b5386ca39928a64dcc0a24cf78b4e61614f7c61524cfcb4bf1001be6753e2d5c4279e1d0f28e0ccd26808e5c6ff
- SSDEEP 98304:Su5x6M1cIu5x6M1cSLapIAu5x6M1cIu5x6M1cSLapIGb:Jw7wScITw7wScIGb
- TLSH T175765B6271E200B6C6999031CF49A33597E17C699FF1C7E7B206F6C52F325C07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry