General
- Target 2026-08-01_15d8f62c6b5b67d5f5097541de354b54_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 14.7MB
- Sample260801-15z3asybnd
- SHA256 36b01c4e34f9535ad009b315bfc790b205768314964c9e39c44143f445f10771
- MD5 15d8f62c6b5b67d5f5097541de354b54
- SHA1 0a5d225459fd9a6fe0421fd0b9a0bf612bbcb6b8
- SHA512 3d37a043e8f0da2790b0ba2b639a4017e5eb665d64376c0c0dd1b390697631b416f8273b44dbb33dc4c7bd831b9eaf89616fcb3ed105bd6f2c7a1732dc432b10
- SSDEEP 98304:Su5x6M1uWQXI/rgoYXo0oAaldmdmnpgu5x6M1uWQXI/rgoYXo0oAaldmdmnpSGgV:JSWQoYXlKmd0hSWQoYXlKmd0KoK
- TLSH T12FF68C03F19500E9D05AD174CB5A9232EB72BC490BF1B6EF2690B6D52E37AE07B39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_15d8f62c6b5b67d5f5097541de354b54_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_15d8f62c6b5b67d5f5097541de354b54_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_15d8f62c6b5b67d5f5097541de354b54_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 14.7MB
- SHA256 36b01c4e34f9535ad009b315bfc790b205768314964c9e39c44143f445f10771
- MD5 15d8f62c6b5b67d5f5097541de354b54
- SHA1 0a5d225459fd9a6fe0421fd0b9a0bf612bbcb6b8
- SHA512 3d37a043e8f0da2790b0ba2b639a4017e5eb665d64376c0c0dd1b390697631b416f8273b44dbb33dc4c7bd831b9eaf89616fcb3ed105bd6f2c7a1732dc432b10
- SSDEEP 98304:Su5x6M1uWQXI/rgoYXo0oAaldmdmnpgu5x6M1uWQXI/rgoYXo0oAaldmdmnpSGgV:JSWQoYXlKmd0hSWQoYXlKmd0KoK
- TLSH T12FF68C03F19500E9D05AD174CB5A9232EB72BC490BF1B6EF2690B6D52E37AE07B39711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry