General
- Target 2026-08-01_c298c6718f5554ffea65d0ed13c00fd4_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 12.5MB
- Sample260801-p469fawbkh
- SHA256 03022add3ae96400be7d62ca4ef3f3ba1e039539152b2333e37f7b2d19ae562a
- MD5 c298c6718f5554ffea65d0ed13c00fd4
- SHA1 c420a66618fe12af78d65131f24f57c2569c7375
- SHA512 9ff8dfd902c4f3e46fc93e455b8a903648f396996770fbae3b379c26d3e9bc86e515ed1d7f339bf8a13cdf302110141f3c74a88aae908b16f6e18299c445e419
- SSDEEP 98304:Uu5x6M1wu5x6M1VQvGAdlCEL8c/bRNw5C/u5x6M1wu5x6M1VQvGAdlCEL8c/bRNv:nPOvyEYc/b3w8oPOvyEYc/b3w8hoK
- TLSH T137D67D51BBE580F5E1A6D134897A9672F7767C020F31EB8B0251FA2E2F336905D39326
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_c298c6718f5554ffea65d0ed13c00fd4_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_c298c6718f5554ffea65d0ed13c00fd4_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_c298c6718f5554ffea65d0ed13c00fd4_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 12.5MB
- SHA256 03022add3ae96400be7d62ca4ef3f3ba1e039539152b2333e37f7b2d19ae562a
- MD5 c298c6718f5554ffea65d0ed13c00fd4
- SHA1 c420a66618fe12af78d65131f24f57c2569c7375
- SHA512 9ff8dfd902c4f3e46fc93e455b8a903648f396996770fbae3b379c26d3e9bc86e515ed1d7f339bf8a13cdf302110141f3c74a88aae908b16f6e18299c445e419
- SSDEEP 98304:Uu5x6M1wu5x6M1VQvGAdlCEL8c/bRNw5C/u5x6M1wu5x6M1VQvGAdlCEL8c/bRNv:nPOvyEYc/b3w8oPOvyEYc/b3w8hoK
- TLSH T137D67D51BBE580F5E1A6D134897A9672F7767C020F31EB8B0251FA2E2F336905D39326
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry