General
- Target 2026-07-17_ec90a2ee6a0943dbb6a0fde14d522b4a_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 6.6MB
- Sample260718-bz1dfabz7r
- SHA256 7be4492712baa8d55be80f8a58a75e68696bd833c72e1ab5aa43177169015f0c
- MD5 ec90a2ee6a0943dbb6a0fde14d522b4a
- SHA1 b63b653989c78ceb896a2082ffccdab9dd523941
- SHA512 18bc7299072c008cd2048cd18dfb49680605549b31bf43cf892c19c2008a2f2fcd98a6c48c191cfd59f7f39a98b58a08a7233e9994daa474175778f3ed9a4bf5
- SSDEEP 98304:Su5x6M1Tu5x6M17hx0zku5x6M1Tu5x6M17hx0zqb:JwBKzXwBKzqb
- TLSH T100665A62B1E200B5D59D9431CB5A6331A6E3BC619FE0C7C78282F62D1F725C07E7A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_ec90a2ee6a0943dbb6a0fde14d522b4a_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_ec90a2ee6a0943dbb6a0fde14d522b4a_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_ec90a2ee6a0943dbb6a0fde14d522b4a_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 6.6MB
- SHA256 7be4492712baa8d55be80f8a58a75e68696bd833c72e1ab5aa43177169015f0c
- MD5 ec90a2ee6a0943dbb6a0fde14d522b4a
- SHA1 b63b653989c78ceb896a2082ffccdab9dd523941
- SHA512 18bc7299072c008cd2048cd18dfb49680605549b31bf43cf892c19c2008a2f2fcd98a6c48c191cfd59f7f39a98b58a08a7233e9994daa474175778f3ed9a4bf5
- SSDEEP 98304:Su5x6M1Tu5x6M17hx0zku5x6M1Tu5x6M17hx0zqb:JwBKzXwBKzqb
- TLSH T100665A62B1E200B5D59D9431CB5A6331A6E3BC619FE0C7C78282F62D1F725C07E7A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry