General
- Target 2026-07-30_b1e434eb94738ad8ddd0b0db76bf52bc_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 33.7MB
- Sample260730-hkwj9swvbv
- SHA256 f028ddda0ae68e91f75d0f0e66c82d76c4a6afe3c7a8ef98edd5ee5c1e0251e4
- MD5 b1e434eb94738ad8ddd0b0db76bf52bc
- SHA1 94851906faced3e94e92a2d68f81f6fb74ecd50e
- SHA512 9cc3dfe8fe4cdb20d7daf9026d9c2f90227a4abe8af0771363eb82549e4d05e408ab056542c4c2fd3dd1be48ac43f49b58d9334b902c570742a4777a53d67495
- SSDEEP 393216:IkLDkL2vyEYKbPkLDkL2vyEYKbXWqQjpYkLDkL2vyEYKb:IkLDkLiRkLDkLiYfjpYkLDkLi
- TLSH T1FD777D42B7E440F9E1AB953499768672EA76BC421B31D6CF0290F61E2F737D05E39322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_b1e434eb94738ad8ddd0b0db76bf52bc_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_b1e434eb94738ad8ddd0b0db76bf52bc_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_b1e434eb94738ad8ddd0b0db76bf52bc_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 33.7MB
- SHA256 f028ddda0ae68e91f75d0f0e66c82d76c4a6afe3c7a8ef98edd5ee5c1e0251e4
- MD5 b1e434eb94738ad8ddd0b0db76bf52bc
- SHA1 94851906faced3e94e92a2d68f81f6fb74ecd50e
- SHA512 9cc3dfe8fe4cdb20d7daf9026d9c2f90227a4abe8af0771363eb82549e4d05e408ab056542c4c2fd3dd1be48ac43f49b58d9334b902c570742a4777a53d67495
- SSDEEP 393216:IkLDkL2vyEYKbPkLDkL2vyEYKbXWqQjpYkLDkL2vyEYKb:IkLDkLiRkLDkLiYfjpYkLDkLi
- TLSH T1FD777D42B7E440F9E1AB953499768672EA76BC421B31D6CF0290F61E2F737D05E39322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application