General
- Target 2026-08-08_ba34eac65388e36ad9cddb8f129548e8_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 10.4MB
- Sample260808-vw8p7a1erc
- SHA256 e2cafe630a8fb14607a215bfe72c53747b1f0d70282f8fbab1bc124e1b2b72d1
- MD5 ba34eac65388e36ad9cddb8f129548e8
- SHA1 0df3e2d6cd3e3078b81bdaf6d7a611bd50165bee
- SHA512 38f86be2a6fdabdc094acb79f6e71544a641148100db90113250e0e6d35d64ed658d12ee80ed2359cf6f96f941ba60b808f97460e6f8767dc6830d9ed3166a67
- SSDEEP 98304:nu5x6M1WoDD+QvGAdlCEL8c/bRNw5CPWQtZ/K0tGOFWVRuLftCTT:Qi8PvyEYc/b3w8PWyZ/K0ttYVAATT
- TLSH T171B67D13B6E440F5E06AD134CA368632EB727C164BB1A6DF1150F69A2F336D07E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_ba34eac65388e36ad9cddb8f129548e8_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_ba34eac65388e36ad9cddb8f129548e8_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_ba34eac65388e36ad9cddb8f129548e8_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 10.4MB
- SHA256 e2cafe630a8fb14607a215bfe72c53747b1f0d70282f8fbab1bc124e1b2b72d1
- MD5 ba34eac65388e36ad9cddb8f129548e8
- SHA1 0df3e2d6cd3e3078b81bdaf6d7a611bd50165bee
- SHA512 38f86be2a6fdabdc094acb79f6e71544a641148100db90113250e0e6d35d64ed658d12ee80ed2359cf6f96f941ba60b808f97460e6f8767dc6830d9ed3166a67
- SSDEEP 98304:nu5x6M1WoDD+QvGAdlCEL8c/bRNw5CPWQtZ/K0tGOFWVRuLftCTT:Qi8PvyEYc/b3w8PWyZ/K0ttYVAATT
- TLSH T171B67D13B6E440F5E06AD134CA368632EB727C164BB1A6DF1150F69A2F336D07E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry