General
- Target 2026-08-01_ab8142b1f4551ba88c8fe4732b4613e6_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 14.3MB
- Sample260801-tkpx9scq9v
- SHA256 b33a9612917d7cb7c7ce710b63545bde96b4125fb7708180b18e4f03ff110387
- MD5 ab8142b1f4551ba88c8fe4732b4613e6
- SHA1 0ad91d01f7c5a8137404796a75bbf619ddb94255
- SHA512 a5e095bee7c7531bc503593cb571ba0422b0f42277c0264e2e4b5dc71fe9e8cf70601149e75e0545b81c2f127cca2324c5e1f4dcc26da441e15cca56602a6d67
- SSDEEP 98304:Su5x6M1uWQXI/rgoYXo0oAaldmdmnpgu5x6M1uWQXI/rgoYXo0oAaldmdmnpvLxm:JSWQoYXlKmd0hSWQoYXlKmd0Rly
- TLSH T17DE68C03F19540E9D05AD074CB569232EB72BC490BF1A6EF2690B7D52E37AE07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_ab8142b1f4551ba88c8fe4732b4613e6_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_ab8142b1f4551ba88c8fe4732b4613e6_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_ab8142b1f4551ba88c8fe4732b4613e6_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 14.3MB
- SHA256 b33a9612917d7cb7c7ce710b63545bde96b4125fb7708180b18e4f03ff110387
- MD5 ab8142b1f4551ba88c8fe4732b4613e6
- SHA1 0ad91d01f7c5a8137404796a75bbf619ddb94255
- SHA512 a5e095bee7c7531bc503593cb571ba0422b0f42277c0264e2e4b5dc71fe9e8cf70601149e75e0545b81c2f127cca2324c5e1f4dcc26da441e15cca56602a6d67
- SSDEEP 98304:Su5x6M1uWQXI/rgoYXo0oAaldmdmnpgu5x6M1uWQXI/rgoYXo0oAaldmdmnpvLxm:JSWQoYXlKmd0hSWQoYXlKmd0Rly
- TLSH T17DE68C03F19540E9D05AD074CB569232EB72BC490BF1A6EF2690B7D52E37AE07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry