General
- Target 2026-07-30_a94c905f82fcd809bd84313dc2245979_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 35.7MB
- Sample260730-hllrfssgjc
- SHA256 c9c68643b8e337c0dce8e225f5b69638f00bd8af7ac9f9f8c57bf975a4209372
- MD5 a94c905f82fcd809bd84313dc2245979
- SHA1 dab87e3304777ef1245a129c86713c3dc7ea0064
- SHA512 6e358675fa76a26048c53f59321d297744ef63f0cfdf7c7300f84c6c9932b1fc1f7320ef67999acfcd541496839b39329803688a9c13f0986262015bf2138ccc
- SSDEEP 393216:IkLDkL2vyEYKbPkLDkL2vyEYKbXWqQjpYkLDkL2vyEYKbI:IkLDkLiRkLDkLiYfjpYkLDkLiO
- TLSH T1F4877D12BBE440F9E16A953495768672EA76BC421B31DBCF0290F61E2F337D05E39326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_a94c905f82fcd809bd84313dc2245979_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_a94c905f82fcd809bd84313dc2245979_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_a94c905f82fcd809bd84313dc2245979_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 35.7MB
- SHA256 c9c68643b8e337c0dce8e225f5b69638f00bd8af7ac9f9f8c57bf975a4209372
- MD5 a94c905f82fcd809bd84313dc2245979
- SHA1 dab87e3304777ef1245a129c86713c3dc7ea0064
- SHA512 6e358675fa76a26048c53f59321d297744ef63f0cfdf7c7300f84c6c9932b1fc1f7320ef67999acfcd541496839b39329803688a9c13f0986262015bf2138ccc
- SSDEEP 393216:IkLDkL2vyEYKbPkLDkL2vyEYKbXWqQjpYkLDkL2vyEYKbI:IkLDkLiRkLDkLiYfjpYkLDkLiO
- TLSH T1F4877D12BBE440F9E16A953495768672EA76BC421B31DBCF0290F61E2F337D05E39326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application