General
- Target 2026-08-04_fc15675a8316c554691356e7012e472c_elex_emotet_icedid_njrat_remcos_vidar
- Size 6.0MB
- Sample260804-vy1scswcma
- SHA256 72d1b5c8939ade4a905c2e5d9b4f583848048e742dfa6b51caf0e3fc386c1574
- MD5 fc15675a8316c554691356e7012e472c
- SHA1 10dcfebb552505745df143778e1d8bd4a69c81b1
- SHA512 52636f55328ca8cb2117d439a012dd1808c4e09e3faac11d51a587f01fd74f19435b875f8628f35945615aeb45e109f505beefb31fdccfb9df98ae5f27594925
- SSDEEP 49152:gYRw5x6M1WoMCxfRq5QIlquu1Gn1jKm4ptlQzJWwbwLqd3ZrzsTfov3/euNw5TSZ:nu5x6M1WoDD+QvGAdlCEL8c/bRNw5CO
- TLSH T13E566C516BE880F5E16BD134897A8676F7767C020E31EB4F0291FA6F2F336905D29326
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_fc15675a8316c554691356e7012e472c_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_fc15675a8316c554691356e7012e472c_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_fc15675a8316c554691356e7012e472c_elex_emotet_icedid_njrat_remcos_vidar
- Size 6.0MB
- SHA256 72d1b5c8939ade4a905c2e5d9b4f583848048e742dfa6b51caf0e3fc386c1574
- MD5 fc15675a8316c554691356e7012e472c
- SHA1 10dcfebb552505745df143778e1d8bd4a69c81b1
- SHA512 52636f55328ca8cb2117d439a012dd1808c4e09e3faac11d51a587f01fd74f19435b875f8628f35945615aeb45e109f505beefb31fdccfb9df98ae5f27594925
- SSDEEP 49152:gYRw5x6M1WoMCxfRq5QIlquu1Gn1jKm4ptlQzJWwbwLqd3ZrzsTfov3/euNw5TSZ:nu5x6M1WoDD+QvGAdlCEL8c/bRNw5CO
- TLSH T13E566C516BE880F5E16BD134897A8676F7767C020E31EB4F0291FA6F2F336905D29326
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry