General
- Target 2026-08-11_54f601818f6aa5ebd64446b5a02204b1_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 3.1MB
- Sample260811-2rg51azzas
- SHA256 69b7681259f48be3eb68b80dd63a8f8c4dc5994936b57ef002affa32695b8b8c
- MD5 54f601818f6aa5ebd64446b5a02204b1
- SHA1 eec86bcd4a204c64371feb847291b2c1a98d11ba
- SHA512 513b81e503b31bd45f2193c6e0b0a0389112961c6f08308157e217d801d6bfa45df9898a60ef6505fef3bc8bb16a0fcb201edf3b445d08c52f33f3461f59f6b1
- SSDEEP 49152:tYRw5x6M1WoMCxfSSgjI45TMwwapIgTr:Su5x6M1WoDMoLapIw
- TLSH T1A1E54A2271E200AAC69D9031CF56973593E17C698FF1C3E7B545B2C92F726C07A3A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_54f601818f6aa5ebd64446b5a02204b1_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_54f601818f6aa5ebd64446b5a02204b1_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_54f601818f6aa5ebd64446b5a02204b1_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 3.1MB
- SHA256 69b7681259f48be3eb68b80dd63a8f8c4dc5994936b57ef002affa32695b8b8c
- MD5 54f601818f6aa5ebd64446b5a02204b1
- SHA1 eec86bcd4a204c64371feb847291b2c1a98d11ba
- SHA512 513b81e503b31bd45f2193c6e0b0a0389112961c6f08308157e217d801d6bfa45df9898a60ef6505fef3bc8bb16a0fcb201edf3b445d08c52f33f3461f59f6b1
- SSDEEP 49152:tYRw5x6M1WoMCxfSSgjI45TMwwapIgTr:Su5x6M1WoDMoLapIw
- TLSH T1A1E54A2271E200AAC69D9031CF56973593E17C698FF1C3E7B545B2C92F726C07A3A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry