General
- Target 2026-07-18_dfa6579a4ba351eba16f491bd72b4d67_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 6.6MB
- Sample260718-gswdssh13k
- SHA256 ad696f6e74248caec41fbe08fb46db9b4120a0f828b283c60cf32bde0d986e9e
- MD5 dfa6579a4ba351eba16f491bd72b4d67
- SHA1 f7cfb5290b01f2a2e103c79c44faa5bf004927dc
- SHA512 66391ce60b0bb97320e6b55286f4177e403724a06e760008ec40b121e3eb544079fa8ffcbaa79702d75b7af37fdfb4c69c5e424c4a5d030c895269217ae08d5d
- SSDEEP 98304:Su5x6M1Tu5x6M17hx0zku5x6M1Tu5x6M17hx0zOD:JwBKzXwBKzOD
- TLSH T178665B66B1E200B5D59D9431CB5A6331A6E3BC618FE0C7C78282F62D1F725C07E7A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_dfa6579a4ba351eba16f491bd72b4d67_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_dfa6579a4ba351eba16f491bd72b4d67_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_dfa6579a4ba351eba16f491bd72b4d67_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 6.6MB
- SHA256 ad696f6e74248caec41fbe08fb46db9b4120a0f828b283c60cf32bde0d986e9e
- MD5 dfa6579a4ba351eba16f491bd72b4d67
- SHA1 f7cfb5290b01f2a2e103c79c44faa5bf004927dc
- SHA512 66391ce60b0bb97320e6b55286f4177e403724a06e760008ec40b121e3eb544079fa8ffcbaa79702d75b7af37fdfb4c69c5e424c4a5d030c895269217ae08d5d
- SSDEEP 98304:Su5x6M1Tu5x6M17hx0zku5x6M1Tu5x6M17hx0zOD:JwBKzXwBKzOD
- TLSH T178665B66B1E200B5D59D9431CB5A6331A6E3BC618FE0C7C78282F62D1F725C07E7A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry