General
- Target 2026-07-15_2a6020fd7c2e7ad7091bc24aa3b606e4_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 3.3MB
- Sample260715-vvf9jsdt2w
- SHA256 d51f3e08deb5f3c1d8d8ed6e68370a864b381dd85de9c42125408d5e4609c5fd
- MD5 2a6020fd7c2e7ad7091bc24aa3b606e4
- SHA1 4677ddf190e4bf212023520f849bb91123f8fe85
- SHA512 042002c0f8a0f3a5264584226419d2178e8e9a5e16c63a70ca17d267dec240650d69da83d95e348ba5e4edb98e6d5da6ea125719a89d0eaca5331c111779fb32
- SSDEEP 24576:tEBDRGo4x5x6YXuquvEBDRGo4x5x6YXuqueVN8FYh+Y0m/YOn/xvNSXdD:tYRw5x6M1sYRw5x6M1xVOyh+Y0zyx2
- TLSH T1D4F55A66B1E200B5D59D9431CB5A6331A6E3BC618FE0C7C78282F62D1F725C07E7A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_2a6020fd7c2e7ad7091bc24aa3b606e4_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_2a6020fd7c2e7ad7091bc24aa3b606e4_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_2a6020fd7c2e7ad7091bc24aa3b606e4_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 3.3MB
- SHA256 d51f3e08deb5f3c1d8d8ed6e68370a864b381dd85de9c42125408d5e4609c5fd
- MD5 2a6020fd7c2e7ad7091bc24aa3b606e4
- SHA1 4677ddf190e4bf212023520f849bb91123f8fe85
- SHA512 042002c0f8a0f3a5264584226419d2178e8e9a5e16c63a70ca17d267dec240650d69da83d95e348ba5e4edb98e6d5da6ea125719a89d0eaca5331c111779fb32
- SSDEEP 24576:tEBDRGo4x5x6YXuquvEBDRGo4x5x6YXuqueVN8FYh+Y0m/YOn/xvNSXdD:tYRw5x6M1sYRw5x6M1xVOyh+Y0zyx2
- TLSH T1D4F55A66B1E200B5D59D9431CB5A6331A6E3BC618FE0C7C78282F62D1F725C07E7A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry