General
- Target 2026-08-03_7c21aae8ada278c3cd129fcca6ab4a79_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 4.7MB
- Sample260804-m9966st1e1
- SHA256 6087196f0fa6a43a7ca34061bb50307cf8b25e4af889435dc875bb610f3e13f2
- MD5 7c21aae8ada278c3cd129fcca6ab4a79
- SHA1 6e5aa9dfdd6ca192ab6ad60485371d53ec563b14
- SHA512 6d61aeb0d686c8db5a222969b728970f1674ea2fafeb83136066033d323bc0decaf46bcab6779886521b8d4b5033ead8c848d4d10a516cc31114902e189f9f4a
- SSDEEP 98304:kxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHt3b:LeGZF6bUpMBs3b
- TLSH T1F836F015B6A442B5E073853489A1922DE6327851DB338E8F52814FEEFFF39918D39732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_7c21aae8ada278c3cd129fcca6ab4a79_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njra.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_7c21aae8ada278c3cd129fcca6ab4a79_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njra.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_7c21aae8ada278c3cd129fcca6ab4a79_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 4.7MB
- SHA256 6087196f0fa6a43a7ca34061bb50307cf8b25e4af889435dc875bb610f3e13f2
- MD5 7c21aae8ada278c3cd129fcca6ab4a79
- SHA1 6e5aa9dfdd6ca192ab6ad60485371d53ec563b14
- SHA512 6d61aeb0d686c8db5a222969b728970f1674ea2fafeb83136066033d323bc0decaf46bcab6779886521b8d4b5033ead8c848d4d10a516cc31114902e189f9f4a
- SSDEEP 98304:kxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHt3b:LeGZF6bUpMBs3b
- TLSH T1F836F015B6A442B5E073853489A1922DE6327851DB338E8F52814FEEFFF39918D39732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory