General
- Target 2026-08-03_f0c40498009f526633c5aeef33cdf6ba_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 4.2MB
- Sample260804-kzew6sge45
- SHA256 8a5f7d6979eb0007a632fd2262d857583289cb74d50fa8b0ee405ab01431ca42
- MD5 f0c40498009f526633c5aeef33cdf6ba
- SHA1 56577cbc459316db05a72f28c522fceef8243bf3
- SHA512 d65635a5eab783b6d39eefdc4d4a7ce301f2e536715e5df3c4c33dc905c5cf306a509144eae4f77d3985567bfdc921c542ec19243e35d0d035a0695f591ff709
- SSDEEP 98304:kxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHo8L:LeGZF6bUpMB38L
- TLSH T142161216F6A041F1E033C179CED2E226EA343C55173486DBA7814B2D6F67AE19A3D732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_f0c40498009f526633c5aeef33cdf6ba_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_f0c40498009f526633c5aeef33cdf6ba_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_f0c40498009f526633c5aeef33cdf6ba_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 4.2MB
- SHA256 8a5f7d6979eb0007a632fd2262d857583289cb74d50fa8b0ee405ab01431ca42
- MD5 f0c40498009f526633c5aeef33cdf6ba
- SHA1 56577cbc459316db05a72f28c522fceef8243bf3
- SHA512 d65635a5eab783b6d39eefdc4d4a7ce301f2e536715e5df3c4c33dc905c5cf306a509144eae4f77d3985567bfdc921c542ec19243e35d0d035a0695f591ff709
- SSDEEP 98304:kxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHo8L:LeGZF6bUpMB38L
- TLSH T142161216F6A041F1E033C179CED2E226EA343C55173486DBA7814B2D6F67AE19A3D732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE