General
- Target 2026-08-11_f3d7c23cdad35a85193b3541d55b2c23_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 53.2MB
- Sample260811-jkd6navvcw
- SHA256 5ab08ece6b2fb3cb760ca0342464f576f9a61260760c226e6de2ad813d307bd7
- MD5 f3d7c23cdad35a85193b3541d55b2c23
- SHA1 9cab106fe140c4c258be94986318f21c5f15e0cd
- SHA512 1ced450ea2ffc0ee0e4b5b5f3b49334ae75feba77a0644ebad2f71ddbe6a40dfddfb3c299d51c2c3556c739817164d08c44e0ff84eedfd86e5896bdd2f090e70
- SSDEEP 786432:IkLDkLokLDkLEkLDkLokLDkLJkLDkLokLDkLEkLDkLokLDkLY:7
- TLSH T1AFC78E42B7E40079F17F8A34D6769632AA76BC460B21D6CF56D4F61E1E32BC09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_f3d7c23cdad35a85193b3541d55b2c23_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_f3d7c23cdad35a85193b3541d55b2c23_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_f3d7c23cdad35a85193b3541d55b2c23_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 53.2MB
- SHA256 5ab08ece6b2fb3cb760ca0342464f576f9a61260760c226e6de2ad813d307bd7
- MD5 f3d7c23cdad35a85193b3541d55b2c23
- SHA1 9cab106fe140c4c258be94986318f21c5f15e0cd
- SHA512 1ced450ea2ffc0ee0e4b5b5f3b49334ae75feba77a0644ebad2f71ddbe6a40dfddfb3c299d51c2c3556c739817164d08c44e0ff84eedfd86e5896bdd2f090e70
- SSDEEP 786432:IkLDkLokLDkLEkLDkLokLDkLJkLDkLokLDkLEkLDkLokLDkLY:7
- TLSH T1AFC78E42B7E40079F17F8A34D6769632AA76BC460B21D6CF56D4F61E1E32BC09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry