General
- Target 2026-08-03_8b89585aeb3d1a87be2aecd3caf9a155_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 4.1MB
- Sample260804-m1fafayblh
- SHA256 6779a8f91d058d7ebce97461949a416556503456bc6118a1c5daddb22e6bd857
- MD5 8b89585aeb3d1a87be2aecd3caf9a155
- SHA1 a9331cbfa2d110b9d876f1c6e79a56ae767aea47
- SHA512 8e4b6c16b54b743d44e53d9fb5424c29d26e56923969f641cafbd826f3ef17456b43e87eb06d0c988f655a113f69dfe0e1d80273e331bb2fe908af0b139225a5
- SSDEEP 98304:kxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHFo:LeGZF6bUpMBao
- TLSH T1C4161216B6A441B9D0339139C9D2E726F635396107308ACF93C15B7E1F276E2AA3E731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_8b89585aeb3d1a87be2aecd3caf9a155_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_8b89585aeb3d1a87be2aecd3caf9a155_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_8b89585aeb3d1a87be2aecd3caf9a155_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 4.1MB
- SHA256 6779a8f91d058d7ebce97461949a416556503456bc6118a1c5daddb22e6bd857
- MD5 8b89585aeb3d1a87be2aecd3caf9a155
- SHA1 a9331cbfa2d110b9d876f1c6e79a56ae767aea47
- SHA512 8e4b6c16b54b743d44e53d9fb5424c29d26e56923969f641cafbd826f3ef17456b43e87eb06d0c988f655a113f69dfe0e1d80273e331bb2fe908af0b139225a5
- SSDEEP 98304:kxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHFo:LeGZF6bUpMBao
- TLSH T1C4161216B6A441B9D0339139C9D2E726F635396107308ACF93C15B7E1F276E2AA3E731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE