General
- Target 2026-07-19_6cc95f7db8a802e8a1b0e6b5017001fa_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 49.2MB
- Sample260720-bp1w8ady6v
- SHA256 8dc00eee654d4c5094bed2f67f3e21f344fe2696016f04c8bfbe57e906784836
- MD5 6cc95f7db8a802e8a1b0e6b5017001fa
- SHA1 f994f4a58800aa0ce9a4e4e9fe89d686cc45efbb
- SHA512 339ee5a8eef43377dc1127bfb6578e8cd39ec18bb68f977aa65872b92e6db8b9a24e7959b9157f6c7f7f5f53c910ce6acf245abd33679050b811bcb11b00e174
- SSDEEP 1572864:mqnqYZ/K0ttYRfqnqYZ/K0ttYRMqnqYZ/K0ttYRfqnqYZ/K0ttYRi:mMYRfMYRMMYRfMYRi
- TLSH T1E8B77C13F1A440E9E1AAD174CE569231EB327C494BF1A5EF3280B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_6cc95f7db8a802e8a1b0e6b5017001fa_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_6cc95f7db8a802e8a1b0e6b5017001fa_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_6cc95f7db8a802e8a1b0e6b5017001fa_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 49.2MB
- SHA256 8dc00eee654d4c5094bed2f67f3e21f344fe2696016f04c8bfbe57e906784836
- MD5 6cc95f7db8a802e8a1b0e6b5017001fa
- SHA1 f994f4a58800aa0ce9a4e4e9fe89d686cc45efbb
- SHA512 339ee5a8eef43377dc1127bfb6578e8cd39ec18bb68f977aa65872b92e6db8b9a24e7959b9157f6c7f7f5f53c910ce6acf245abd33679050b811bcb11b00e174
- SSDEEP 1572864:mqnqYZ/K0ttYRfqnqYZ/K0ttYRMqnqYZ/K0ttYRfqnqYZ/K0ttYRi:mMYRfMYRMMYRfMYRi
- TLSH T1E8B77C13F1A440E9E1AAD174CE569231EB327C494BF1A5EF3280B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application