General
- Target 2026-08-03_216b986b42c4704fbd73697629b0f10d_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 4.4MB
- Sample260804-p2bpraw1e1
- SHA256 8c2fafe77d684966565f1827b3ac5616f3ab4aab0769ddd1aa516e2e7bc31f10
- MD5 216b986b42c4704fbd73697629b0f10d
- SHA1 47de6bbbf6fbcb6552c6ffe65bd279f328d109e2
- SHA512 16df9860eb59edb9a2338ce979f1000154b2096d07008e529e25e39fd0dc3bb1372bb44b8b12a7caabb27195c20dcd25f1bf14a4aefb4273a21d05a5319ffebe
- SSDEEP 98304:kxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHgq:LeGZF6bUpMBLq
- TLSH T18426F026E6B840B5E076B139C593D626E631BC55472086CFB6946F1A3F336E1F93E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_216b986b42c4704fbd73697629b0f10d_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njra.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_216b986b42c4704fbd73697629b0f10d_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njra.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_216b986b42c4704fbd73697629b0f10d_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 4.4MB
- SHA256 8c2fafe77d684966565f1827b3ac5616f3ab4aab0769ddd1aa516e2e7bc31f10
- MD5 216b986b42c4704fbd73697629b0f10d
- SHA1 47de6bbbf6fbcb6552c6ffe65bd279f328d109e2
- SHA512 16df9860eb59edb9a2338ce979f1000154b2096d07008e529e25e39fd0dc3bb1372bb44b8b12a7caabb27195c20dcd25f1bf14a4aefb4273a21d05a5319ffebe
- SSDEEP 98304:kxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHgq:LeGZF6bUpMBLq
- TLSH T18426F026E6B840B5E076B139C593D626E631BC55472086CFB6946F1A3F336E1F93E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE