General
- Target 2026-07-16_46d6399d62a242ca208743ed7ff59c3c_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- Sample260716-destzafs8x
- SHA256 f59be9bcf34b23284dd4703a72824a67babc9fb7386403c5020331f3be551473
- MD5 46d6399d62a242ca208743ed7ff59c3c
- SHA1 65db7c68fd5502bfb2e595cfa8e9003397aba7fd
- SHA512 81e2498d2ea6c529fb910c513622d7cb5e80832dcf4b655a4d8f2b055794eda328a63d02fdfd32431ce2e7cdf098b20ca2e637230ecbafcd9e4d6d0fddeb7865
- SSDEEP 12288:GaoVLa4Yd0i3drBRy9hdFIdhoyYTiuWXu:GDVLa50i/RyhdshPmiuWXu
- TLSH T16294AE1532E444F6E1B641308C629A35D737FC740B31DAAF43649FBDAE326809D2BB66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_46d6399d62a242ca208743ed7ff59c3c_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_46d6399d62a242ca208743ed7ff59c3c_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_46d6399d62a242ca208743ed7ff59c3c_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- SHA256 f59be9bcf34b23284dd4703a72824a67babc9fb7386403c5020331f3be551473
- MD5 46d6399d62a242ca208743ed7ff59c3c
- SHA1 65db7c68fd5502bfb2e595cfa8e9003397aba7fd
- SHA512 81e2498d2ea6c529fb910c513622d7cb5e80832dcf4b655a4d8f2b055794eda328a63d02fdfd32431ce2e7cdf098b20ca2e637230ecbafcd9e4d6d0fddeb7865
- SSDEEP 12288:GaoVLa4Yd0i3drBRy9hdFIdhoyYTiuWXu:GDVLa50i/RyhdshPmiuWXu
- TLSH T16294AE1532E444F6E1B641308C629A35D737FC740B31DAAF43649FBDAE326809D2BB66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory