General
- Target 2026-08-08_cc2748dcd27a32b759d9fc52abf54f41_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 23.3MB
- Sample260808-vsj8es1eld
- SHA256 8a4c347a3aeb95249ae96145cc1a7720f2fb917ec86572bdfcd484401dd6f308
- MD5 cc2748dcd27a32b759d9fc52abf54f41
- SHA1 af89db501ab9492f73b698edce020a42b0f407c3
- SHA512 9e4a4880ed31ec370cfa69937d9db9c136503803c69c22d85b467576bf2352ef15a73cdb7eb3066c5ac312ddfec3ba030ee5cfde7570a90e857eccc326e24a13
- SSDEEP 393216:IPvyEYKbayZ/K0ttYZTVPvyEYKbayZ/K0ttYZTTe:In4yZ/K0ttYZTVn4yZ/K0ttYZTi
- TLSH T170378E13F6E440F5E06AD134CA768631EB727C464BB1A6DF1250F69A2F33AD06E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_cc2748dcd27a32b759d9fc52abf54f41_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_cc2748dcd27a32b759d9fc52abf54f41_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_cc2748dcd27a32b759d9fc52abf54f41_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 23.3MB
- SHA256 8a4c347a3aeb95249ae96145cc1a7720f2fb917ec86572bdfcd484401dd6f308
- MD5 cc2748dcd27a32b759d9fc52abf54f41
- SHA1 af89db501ab9492f73b698edce020a42b0f407c3
- SHA512 9e4a4880ed31ec370cfa69937d9db9c136503803c69c22d85b467576bf2352ef15a73cdb7eb3066c5ac312ddfec3ba030ee5cfde7570a90e857eccc326e24a13
- SSDEEP 393216:IPvyEYKbayZ/K0ttYZTVPvyEYKbayZ/K0ttYZTTe:In4yZ/K0ttYZTVn4yZ/K0ttYZTi
- TLSH T170378E13F6E440F5E06AD134CA768631EB727C464BB1A6DF1250F69A2F33AD06E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application