General
- Target 2026-08-05_e422bbd85d4fbbe9fac53aef9cce8ce0_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 12.9MB
- Sample260805-jje2kasard
- SHA256 447087cc7f84612a47f5e870236516137b8f9f8ff9baf5b6494e428011ecf1d0
- MD5 e422bbd85d4fbbe9fac53aef9cce8ce0
- SHA1 c8710a96c3d81b2b0a4b88b91dc1695d2d4b5b8e
- SHA512 b7df9aa1d290c28676066aab80de02b2bf1eeb53567b0565b2a987bc793938da8ce83f3ef0fac738a28cf9ced9d887e78956740bb5fd80f6830e1d874eac813a
- SSDEEP 98304:Su5x6M1cIu5x6M1cSLapIAu5x6M1cIu5x6M1cSLapI6Gu5x6M1cIu5x6M1cSLapI:Jw7wScITw7wScI6dw7wScITw7wSM
- TLSH T143D68E6271D240B6C6999030CF49A33597E1BC699BF1C7E7B206F7C52F325C07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_e422bbd85d4fbbe9fac53aef9cce8ce0_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_e422bbd85d4fbbe9fac53aef9cce8ce0_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_e422bbd85d4fbbe9fac53aef9cce8ce0_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 12.9MB
- SHA256 447087cc7f84612a47f5e870236516137b8f9f8ff9baf5b6494e428011ecf1d0
- MD5 e422bbd85d4fbbe9fac53aef9cce8ce0
- SHA1 c8710a96c3d81b2b0a4b88b91dc1695d2d4b5b8e
- SHA512 b7df9aa1d290c28676066aab80de02b2bf1eeb53567b0565b2a987bc793938da8ce83f3ef0fac738a28cf9ced9d887e78956740bb5fd80f6830e1d874eac813a
- SSDEEP 98304:Su5x6M1cIu5x6M1cSLapIAu5x6M1cIu5x6M1cSLapI6Gu5x6M1cIu5x6M1cSLapI:Jw7wScITw7wScI6dw7wScITw7wSM
- TLSH T143D68E6271D240B6C6999030CF49A33597E1BC699BF1C7E7B206F7C52F325C07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry