General
- Target 2026-08-03_2cdaabfcddc35902ccfd15627380e8ff_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 4.3MB
- Sample260804-ptsy3aep9y
- SHA256 1b24ddc380415eef2cbc2de6166e368204c369b244ccdd027003a5c6612335c3
- MD5 2cdaabfcddc35902ccfd15627380e8ff
- SHA1 79452f0ea426b26079a8f7f0cf962cf5f55516d0
- SHA512 84592e00d9153e496b40e67284cee70b6e097a8740613976a619ff8fee4a2970d4683b6354db26f9f1d319c5f796cd15fedf81b798da2d7053fdd1bb32d15c72
- SSDEEP 98304:kxQeMjLsAAa/7JNzJwjI5klUigKYkBEvH8/:LeGZF6bUpMB7
- TLSH T141260212B7E441B5F0739179C9B2E225EB717CA11B30868F93815B2E5E33AE19D39732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_2cdaabfcddc35902ccfd15627380e8ff_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_2cdaabfcddc35902ccfd15627380e8ff_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_2cdaabfcddc35902ccfd15627380e8ff_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 4.3MB
- SHA256 1b24ddc380415eef2cbc2de6166e368204c369b244ccdd027003a5c6612335c3
- MD5 2cdaabfcddc35902ccfd15627380e8ff
- SHA1 79452f0ea426b26079a8f7f0cf962cf5f55516d0
- SHA512 84592e00d9153e496b40e67284cee70b6e097a8740613976a619ff8fee4a2970d4683b6354db26f9f1d319c5f796cd15fedf81b798da2d7053fdd1bb32d15c72
- SSDEEP 98304:kxQeMjLsAAa/7JNzJwjI5klUigKYkBEvH8/:LeGZF6bUpMB7
- TLSH T141260212B7E441B5F0739179C9B2E225EB717CA11B30868F93815B2E5E33AE19D39732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE