General
- Target 2026-08-05_d1635d8f130ce665a9ea118a269adf39_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar
- Size 51.7MB
- Sample260805-y35hwsvgpg
- SHA256 e089f8cc530b7182e29135f3946fbf87d23ec2dab468463ed0ff4ef2af800c5d
- MD5 d1635d8f130ce665a9ea118a269adf39
- SHA1 73a5acb8e6dc25b8fa906a229d323e580ce34ee6
- SHA512 ad1d467d67f3bd1aa5e492b37e0a7bb3e533ac82c529316b198338919c68752f4e99c43ddf4ef2f47274220ddb20e1700be0047b097c046eeee05fe2ad4e15f2
- SSDEEP 786432:IkLDkLokLDkLEkLDkLokLDkLJkLDkLokLDkLEkLDkLokLDkLH:k
- TLSH T18EC78E42B7E40079F17F8A34D6769632AA76BC860B21D6CF56D4F61E1E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_d1635d8f130ce665a9ea118a269adf39_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_d1635d8f130ce665a9ea118a269adf39_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_d1635d8f130ce665a9ea118a269adf39_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar
- Size 51.7MB
- SHA256 e089f8cc530b7182e29135f3946fbf87d23ec2dab468463ed0ff4ef2af800c5d
- MD5 d1635d8f130ce665a9ea118a269adf39
- SHA1 73a5acb8e6dc25b8fa906a229d323e580ce34ee6
- SHA512 ad1d467d67f3bd1aa5e492b37e0a7bb3e533ac82c529316b198338919c68752f4e99c43ddf4ef2f47274220ddb20e1700be0047b097c046eeee05fe2ad4e15f2
- SSDEEP 786432:IkLDkLokLDkLEkLDkLokLDkLJkLDkLokLDkLEkLDkLokLDkLH:k
- TLSH T18EC78E42B7E40079F17F8A34D6769632AA76BC860B21D6CF56D4F61E1E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry