General
- Target 2026-07-18_3608259a70005caa8fe57a9f0f139e93_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 6.6MB
- Sample260718-j9752agz41
- SHA256 20f97151716a2bd77a119309ec3c40d170858aced6904e6a026ba8f20740ca9e
- MD5 3608259a70005caa8fe57a9f0f139e93
- SHA1 3da77b643c7cbdd5b5ac55ab798658d61474d1c6
- SHA512 2662f03cec42644cf2e4c9023ec2c32b5def186287e3dd0519de3e3c9199f8c146021b3718ca43e9b5cb02387b65a19a211dfce514b1ab8dee0cbb20035f5163
- SSDEEP 98304:Su5x6M1Tu5x6M17hx0zku5x6M1Tu5x6M17hx0zsj:JwBKzXwBKzsj
- TLSH T142665B66B1E200B5D59D9431CB5A6331A6E3BC618FE0C7C78282F62D1F725C07E7A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_3608259a70005caa8fe57a9f0f139e93_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_3608259a70005caa8fe57a9f0f139e93_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_3608259a70005caa8fe57a9f0f139e93_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 6.6MB
- SHA256 20f97151716a2bd77a119309ec3c40d170858aced6904e6a026ba8f20740ca9e
- MD5 3608259a70005caa8fe57a9f0f139e93
- SHA1 3da77b643c7cbdd5b5ac55ab798658d61474d1c6
- SHA512 2662f03cec42644cf2e4c9023ec2c32b5def186287e3dd0519de3e3c9199f8c146021b3718ca43e9b5cb02387b65a19a211dfce514b1ab8dee0cbb20035f5163
- SSDEEP 98304:Su5x6M1Tu5x6M17hx0zku5x6M1Tu5x6M17hx0zsj:JwBKzXwBKzsj
- TLSH T142665B66B1E200B5D59D9431CB5A6331A6E3BC618FE0C7C78282F62D1F725C07E7A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry