General
- Target 2026-07-29_3fa274796b932774544c2d6e58d27a06_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 7.3MB
- Sample260729-tevassba63
- SHA256 e20efce3165e1a526fba6580c417b7597136d903aa2d317cbb3349e393a6e00d
- MD5 3fa274796b932774544c2d6e58d27a06
- SHA1 197296a61f4f516ca95773ba22d9633aee872153
- SHA512 2489fb874136b1106eccca11c329f446a499289134f9a82422b8fa23553b53127c117061c20f265dc89b313b25f03e6a9a93d01c435e599757a42a05880829cd
- SSDEEP 98304:Su5x6M1WoDMoLapIAu5x6M1WoDMoLapIOhx0z:Ji5ocITi5ocIaKz
- TLSH T181764A2271E200AAC69D9031CF56973597E17C798FF1C3E7A145B2C92F726C07A3A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_3fa274796b932774544c2d6e58d27a06_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_3fa274796b932774544c2d6e58d27a06_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_3fa274796b932774544c2d6e58d27a06_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 7.3MB
- SHA256 e20efce3165e1a526fba6580c417b7597136d903aa2d317cbb3349e393a6e00d
- MD5 3fa274796b932774544c2d6e58d27a06
- SHA1 197296a61f4f516ca95773ba22d9633aee872153
- SHA512 2489fb874136b1106eccca11c329f446a499289134f9a82422b8fa23553b53127c117061c20f265dc89b313b25f03e6a9a93d01c435e599757a42a05880829cd
- SSDEEP 98304:Su5x6M1WoDMoLapIAu5x6M1WoDMoLapIOhx0z:Ji5ocITi5ocIaKz
- TLSH T181764A2271E200AAC69D9031CF56973597E17C798FF1C3E7A145B2C92F726C07A3A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry