General
- Target 2026-08-10_ccc8d160cfc65d151d83c6beb1bd2c5f_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 11.0MB
- Sample260810-ydewya1zcw
- SHA256 91005670cf98df341352d38380d1c4bd31da12d6941144549b843f7f1c1e88db
- MD5 ccc8d160cfc65d151d83c6beb1bd2c5f
- SHA1 cef1cfec4a0f329276c9dea7d718cb8225d02142
- SHA512 e37fd1c40dcf02ddba7102b9229446decff2d3534e32dadfc1e9d35917154d5558ff8038a54e84976662da70c74f8dafa467b1cad38095dcb895961e7b2f1750
- SSDEEP 196608:JSWyZ/K0ttYVAATwSWyZ/K0ttYVAATu5w8:zyZ/K0ttYZTayZ/K0ttYZTUw8
- TLSH T18FC67C03F2E940E9E1AAD174CE3593319B72BC5A8BF1A5DF224076D41E36AD07B38725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_ccc8d160cfc65d151d83c6beb1bd2c5f_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_ccc8d160cfc65d151d83c6beb1bd2c5f_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_ccc8d160cfc65d151d83c6beb1bd2c5f_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 11.0MB
- SHA256 91005670cf98df341352d38380d1c4bd31da12d6941144549b843f7f1c1e88db
- MD5 ccc8d160cfc65d151d83c6beb1bd2c5f
- SHA1 cef1cfec4a0f329276c9dea7d718cb8225d02142
- SHA512 e37fd1c40dcf02ddba7102b9229446decff2d3534e32dadfc1e9d35917154d5558ff8038a54e84976662da70c74f8dafa467b1cad38095dcb895961e7b2f1750
- SSDEEP 196608:JSWyZ/K0ttYVAATwSWyZ/K0ttYVAATu5w8:zyZ/K0ttYZTayZ/K0ttYZTUw8
- TLSH T18FC67C03F2E940E9E1AAD174CE3593319B72BC5A8BF1A5DF224076D41E36AD07B38725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry