General
- Target 2026-08-03_a093f41bb64d109b123dde1650f6e8b5_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 4.3MB
- Sample260804-mjyepattgv
- SHA256 0cd92c98a10b9713b85221716541ddb1846c014dc39f3a6e030455df3e8ae3fb
- MD5 a093f41bb64d109b123dde1650f6e8b5
- SHA1 ca053b15d5ac1c457158469c7b0115305a1913c1
- SHA512 8f7f9832fdb510eb157032d23f8f1f3471d9e2d994e5752b2d7571d33ea26f0bd575253321c818f5310b344694bce37770de7990bb5ee84476b1f9376b2713da
- SSDEEP 98304:kxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHEb:LeGZF6bUpMBD
- TLSH T10226E111B7F40079F0B3A676CEF6D626EA367CA55B31C68F53804B1E0E32A919935732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_a093f41bb64d109b123dde1650f6e8b5_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_a093f41bb64d109b123dde1650f6e8b5_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a093f41bb64d109b123dde1650f6e8b5_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 4.3MB
- SHA256 0cd92c98a10b9713b85221716541ddb1846c014dc39f3a6e030455df3e8ae3fb
- MD5 a093f41bb64d109b123dde1650f6e8b5
- SHA1 ca053b15d5ac1c457158469c7b0115305a1913c1
- SHA512 8f7f9832fdb510eb157032d23f8f1f3471d9e2d994e5752b2d7571d33ea26f0bd575253321c818f5310b344694bce37770de7990bb5ee84476b1f9376b2713da
- SSDEEP 98304:kxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHEb:LeGZF6bUpMBD
- TLSH T10226E111B7F40079F0B3A676CEF6D626EA367CA55B31C68F53804B1E0E32A919935732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory