General
- Target 2026-07-20_b3f1faeb83480f2a30fcd4a86f980956_cobalt-strike_elex_emotet_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 7.6MB
- Sample260720-vnd6lsg12q
- SHA256 6c898cc02e3e1ec01ed142242e167676e9fe4a34f2c2aebb925c95919d566fbd
- MD5 b3f1faeb83480f2a30fcd4a86f980956
- SHA1 21d1e69315c85be81abea5235d11b1a9b0e13386
- SHA512 3434c4cb5df201fcca2daacc79bed76392e939e9262f527e73edbe7d1a01c5bcd976a0fb8ac9cb3f44ddc5768a810fa1b470d823877bbd7ee5d1a56785417f00
- SSDEEP 98304:Su5x6M1uWQLtWa7qNu5x6M1uWQLtWa7q1j:JSWRSSWR1j
- TLSH T11E867C23F1E200E9C04DD0359B4AA332EAE27C658FA0E7DB4251B7551F77AD06B3971A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_b3f1faeb83480f2a30fcd4a86f980956_cobalt-strike_elex_emotet_icedid_luca-stealer_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_b3f1faeb83480f2a30fcd4a86f980956_cobalt-strike_elex_emotet_icedid_luca-stealer_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_b3f1faeb83480f2a30fcd4a86f980956_cobalt-strike_elex_emotet_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 7.6MB
- SHA256 6c898cc02e3e1ec01ed142242e167676e9fe4a34f2c2aebb925c95919d566fbd
- MD5 b3f1faeb83480f2a30fcd4a86f980956
- SHA1 21d1e69315c85be81abea5235d11b1a9b0e13386
- SHA512 3434c4cb5df201fcca2daacc79bed76392e939e9262f527e73edbe7d1a01c5bcd976a0fb8ac9cb3f44ddc5768a810fa1b470d823877bbd7ee5d1a56785417f00
- SSDEEP 98304:Su5x6M1uWQLtWa7qNu5x6M1uWQLtWa7q1j:JSWRSSWR1j
- TLSH T11E867C23F1E200E9C04DD0359B4AA332EAE27C658FA0E7DB4251B7551F77AD06B3971A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry