General
- Target 2026-07-17_9afef602028d339a16e277398cabf2a8_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 6.6MB
- Sample260718-daaslaht8v
- SHA256 5ab45f23abdd8a346b789b2029e96d8359a2519d5bfc711ad5704464b91933e8
- MD5 9afef602028d339a16e277398cabf2a8
- SHA1 d1b7ada53a22d6a62fc9b9ed7412a16c504d26f9
- SHA512 bc73ae442c080a96ef29e9029b047d901f0218c8d4741447f3bb4207049758da3b982ffec72b80dd2fba39f729e852a6585dc25673ab988508ea2b61c1cc943f
- SSDEEP 98304:Su5x6M1Tu5x6M17hx0zku5x6M1Tu5x6M17hx0zo:JwBKzXwBKzo
- TLSH T155665B66B1E200B5D59D9431CB5A6331A6E3BC618FE0C7C78282F62D1F725C07E7A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_9afef602028d339a16e277398cabf2a8_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_9afef602028d339a16e277398cabf2a8_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_9afef602028d339a16e277398cabf2a8_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 6.6MB
- SHA256 5ab45f23abdd8a346b789b2029e96d8359a2519d5bfc711ad5704464b91933e8
- MD5 9afef602028d339a16e277398cabf2a8
- SHA1 d1b7ada53a22d6a62fc9b9ed7412a16c504d26f9
- SHA512 bc73ae442c080a96ef29e9029b047d901f0218c8d4741447f3bb4207049758da3b982ffec72b80dd2fba39f729e852a6585dc25673ab988508ea2b61c1cc943f
- SSDEEP 98304:Su5x6M1Tu5x6M17hx0zku5x6M1Tu5x6M17hx0zo:JwBKzXwBKzo
- TLSH T155665B66B1E200B5D59D9431CB5A6331A6E3BC618FE0C7C78282F62D1F725C07E7A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry