General
- Target 2026-07-18_899687843e1a5e26f62797d7c04e9080_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 6.7MB
- Sample260718-h3jnesft6s
- SHA256 95084ff13005e10e35cfc4a6350e639c22af09b3ecc47d66f25a52a4d86d64eb
- MD5 899687843e1a5e26f62797d7c04e9080
- SHA1 e742458e2f584e55c670b61570281670097d9deb
- SHA512 3b58bb7b517691b47772503b2cc0c33bb2edd77b16f0080d75d6c2aabba8b4d39b60e8feb87a8d0bf4cd7596a69f6383024d6bec830560c24d94c4fef6b2c71e
- SSDEEP 98304:Su5x6M1Tu5x6M17hx0zku5x6M1Tu5x6M17hx0zg:JwBKzXwBKzg
- TLSH T158664966F1E200A5D59D9431CB5A6331B6E3BC618FE0C7C78281F63D1F725C06ABA61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_899687843e1a5e26f62797d7c04e9080_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_899687843e1a5e26f62797d7c04e9080_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_899687843e1a5e26f62797d7c04e9080_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 6.7MB
- SHA256 95084ff13005e10e35cfc4a6350e639c22af09b3ecc47d66f25a52a4d86d64eb
- MD5 899687843e1a5e26f62797d7c04e9080
- SHA1 e742458e2f584e55c670b61570281670097d9deb
- SHA512 3b58bb7b517691b47772503b2cc0c33bb2edd77b16f0080d75d6c2aabba8b4d39b60e8feb87a8d0bf4cd7596a69f6383024d6bec830560c24d94c4fef6b2c71e
- SSDEEP 98304:Su5x6M1Tu5x6M17hx0zku5x6M1Tu5x6M17hx0zg:JwBKzXwBKzg
- TLSH T158664966F1E200A5D59D9431CB5A6331B6E3BC618FE0C7C78281F63D1F725C06ABA61B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry