General
- Target 2026-08-02_ea3106fc4bc6ca766e3dd1b77e17df81_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- Sample260802-cwg85abp91
- SHA256 4b437753d41276ee67cd550fdca21758fb79e23e1041c4495ec340bbf82164b6
- MD5 ea3106fc4bc6ca766e3dd1b77e17df81
- SHA1 c8eb71364a78f7c90a4df560b34558c22cd20f71
- SHA512 c8e47dfa651e60950f8e61f59f59523ea0b81553d0414ccddfdb8cd4d83659f1b0a78a4dffdc80f1710dfff5eea808499ba14ff20163701edb704ee37112522f
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXR:GDVmpzSi/RyhdshPmiuWXR
- TLSH T132947C1632D44EF5E1BF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_ea3106fc4bc6ca766e3dd1b77e17df81_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_ea3106fc4bc6ca766e3dd1b77e17df81_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_ea3106fc4bc6ca766e3dd1b77e17df81_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- SHA256 4b437753d41276ee67cd550fdca21758fb79e23e1041c4495ec340bbf82164b6
- MD5 ea3106fc4bc6ca766e3dd1b77e17df81
- SHA1 c8eb71364a78f7c90a4df560b34558c22cd20f71
- SHA512 c8e47dfa651e60950f8e61f59f59523ea0b81553d0414ccddfdb8cd4d83659f1b0a78a4dffdc80f1710dfff5eea808499ba14ff20163701edb704ee37112522f
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXR:GDVmpzSi/RyhdshPmiuWXR
- TLSH T132947C1632D44EF5E1BF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory