General
- Target 2026-07-16_6a2303a2ca27e76d9b94531d6b4429cf_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 15.6MB
- Sample260716-eaa9sscv6p
- SHA256 0633bb3ebbfcbb2f49d489baae7dba1d0e210d218bfa7584463621b2d79ade8b
- MD5 6a2303a2ca27e76d9b94531d6b4429cf
- SHA1 19ac25738165dfa25d201e1135390ef05081eff9
- SHA512 d57a4006973d9074fade7775d880a36b9b6091c4f92ac0181a37f7717c8c45d6a5c5872b5e77ab39f5fd340c3495d0e41e77f279694af56c3c0c34bcaec25410
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6q7GgHIKgM/u5x6M1WoDDklJ6qCu5x6M1h:Qi8kLri8kL5oKmi8kLri8kL5oKyIcb
- TLSH T1C4F69F03B7D400B9E16E863496769532EA72BC461B21E6CF5794F61E2E73BC09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_6a2303a2ca27e76d9b94531d6b4429cf_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_6a2303a2ca27e76d9b94531d6b4429cf_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_6a2303a2ca27e76d9b94531d6b4429cf_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 15.6MB
- SHA256 0633bb3ebbfcbb2f49d489baae7dba1d0e210d218bfa7584463621b2d79ade8b
- MD5 6a2303a2ca27e76d9b94531d6b4429cf
- SHA1 19ac25738165dfa25d201e1135390ef05081eff9
- SHA512 d57a4006973d9074fade7775d880a36b9b6091c4f92ac0181a37f7717c8c45d6a5c5872b5e77ab39f5fd340c3495d0e41e77f279694af56c3c0c34bcaec25410
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6q7GgHIKgM/u5x6M1WoDDklJ6qCu5x6M1h:Qi8kLri8kL5oKmi8kLri8kL5oKyIcb
- TLSH T1C4F69F03B7D400B9E16E863496769532EA72BC461B21E6CF5794F61E2E73BC09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry