General
- Target 2026-08-10_130ecc3f3b806ef74628e97c05b4ee5a_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 33.6MB
- Sample260810-hj4t9axyfx
- SHA256 f08bff8f0d22f031fb6751e617effffb58762e3529757cb904205f75b8a74b48
- MD5 130ecc3f3b806ef74628e97c05b4ee5a
- SHA1 cd30806dd0d2ffc66f7820249908176b74220c09
- SHA512 324a5fd48c8b24468896449fc8cdc006b5c7e66ede3d6daec6ba87a66025f926920ce78b6af2fb2ee731d4abae7cb1c8b3db8fa86c601aed1e648df19430063f
- SSDEEP 786432:zyZ/K0ttYZTEqiyZ/K0ttYZTEqEgyZ/K0ttYZTEqiyZ/K0ttYZTEqEI:uZ/K0ttYREqpZ/K0ttYREqErZ/K0ttY6
- TLSH T127776A13F2E540E9E19AD134CF2682319B727C598BF1A6EF324076D52E72AD03B39725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_130ecc3f3b806ef74628e97c05b4ee5a_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_130ecc3f3b806ef74628e97c05b4ee5a_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_130ecc3f3b806ef74628e97c05b4ee5a_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 33.6MB
- SHA256 f08bff8f0d22f031fb6751e617effffb58762e3529757cb904205f75b8a74b48
- MD5 130ecc3f3b806ef74628e97c05b4ee5a
- SHA1 cd30806dd0d2ffc66f7820249908176b74220c09
- SHA512 324a5fd48c8b24468896449fc8cdc006b5c7e66ede3d6daec6ba87a66025f926920ce78b6af2fb2ee731d4abae7cb1c8b3db8fa86c601aed1e648df19430063f
- SSDEEP 786432:zyZ/K0ttYZTEqiyZ/K0ttYZTEqEgyZ/K0ttYZTEqiyZ/K0ttYZTEqEI:uZ/K0ttYREqpZ/K0ttYREqErZ/K0ttY6
- TLSH T127776A13F2E540E9E19AD134CF2682319B727C598BF1A6EF324076D52E72AD03B39725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application