General
- Target 2026-07-17_f223d2229bbb94b9019ab7c225aa9f22_cobalt-strike_elex_emotet_icedid_remcos_vidar
- Size 8.3MB
- Sample260718-bw5traby8q
- SHA256 d744a697892b99dd7898a87f7bd74f1c3b2577d433c8734bf91ae6ab5d7702f8
- MD5 f223d2229bbb94b9019ab7c225aa9f22
- SHA1 9ea4441d1027bbf21b4418df0d2a3a2f6fbce2c1
- SHA512 a95edd432263d9cc730b97bb8d4a55bdf55e4afe1da972783d0fb72e90d0bd9ac4fbfa4ba0723270cd533508dd9246d5316a43d755c298f59451d2c7a2f8f4ae
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDwu5x6M1WoDDklJ6qCu5x6M1WoDjD:Qi8kLriMi8kLri0D
- TLSH T163969F02B6D400BAE27E4A30957A9632DA76BD460711DBCF97D0F65E2E327C09E35327
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_f223d2229bbb94b9019ab7c225aa9f22_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_f223d2229bbb94b9019ab7c225aa9f22_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_f223d2229bbb94b9019ab7c225aa9f22_cobalt-strike_elex_emotet_icedid_remcos_vidar
- Size 8.3MB
- SHA256 d744a697892b99dd7898a87f7bd74f1c3b2577d433c8734bf91ae6ab5d7702f8
- MD5 f223d2229bbb94b9019ab7c225aa9f22
- SHA1 9ea4441d1027bbf21b4418df0d2a3a2f6fbce2c1
- SHA512 a95edd432263d9cc730b97bb8d4a55bdf55e4afe1da972783d0fb72e90d0bd9ac4fbfa4ba0723270cd533508dd9246d5316a43d755c298f59451d2c7a2f8f4ae
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDwu5x6M1WoDDklJ6qCu5x6M1WoDjD:Qi8kLriMi8kLri0D
- TLSH T163969F02B6D400BAE27E4A30957A9632DA76BD460711DBCF97D0F65E2E327C09E35327
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry