General
- Target 2026-07-19_5d6be0ad6fa6e3dcbd2363f5f4473f2e_cobalt-strike_elex_emotet_icedid_remcos_vidar
- Size 22.4MB
- Sample260719-2e2c4ses4l
- SHA256 a7f1b34fcb8015c4ce168e10fa6225a6e2705ce71324f2248015944473630670
- MD5 5d6be0ad6fa6e3dcbd2363f5f4473f2e
- SHA1 875ed86cdbcbcd93bcba277613cc6e21f6aa29ce
- SHA512 a230c16ed9dd2f5c4c62197b9fb685ae4030e04893e8ab0a05ab3ec81a29f278e3bc51e373195151e1f2ab2d766373c7b4bdb75936bc6f81708823656916c81c
- SSDEEP 196608:Qi8kLri8kLPi8kLri8kL3ci8kLri8kLPi8kLri8kL3O:IkLDkLHkLDkL3EkLDkLHkLDkL3O
- TLSH T1F8379D42B7E4407EF1BB4A30953A96329A76BD820B11DBCF56D4F61E2D327C09A31367
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_5d6be0ad6fa6e3dcbd2363f5f4473f2e_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_5d6be0ad6fa6e3dcbd2363f5f4473f2e_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_5d6be0ad6fa6e3dcbd2363f5f4473f2e_cobalt-strike_elex_emotet_icedid_remcos_vidar
- Size 22.4MB
- SHA256 a7f1b34fcb8015c4ce168e10fa6225a6e2705ce71324f2248015944473630670
- MD5 5d6be0ad6fa6e3dcbd2363f5f4473f2e
- SHA1 875ed86cdbcbcd93bcba277613cc6e21f6aa29ce
- SHA512 a230c16ed9dd2f5c4c62197b9fb685ae4030e04893e8ab0a05ab3ec81a29f278e3bc51e373195151e1f2ab2d766373c7b4bdb75936bc6f81708823656916c81c
- SSDEEP 196608:Qi8kLri8kLPi8kLri8kL3ci8kLri8kLPi8kLri8kL3O:IkLDkLHkLDkL3EkLDkLHkLDkL3O
- TLSH T1F8379D42B7E4407EF1BB4A30953A96329A76BD820B11DBCF56D4F61E2D327C09A31367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry