General
- Target 2026-08-13_f6f0520ea8f6c28096c6a853ca751071_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 24.6MB
- Sample260813-dakykaaj71
- SHA256 b915376b8097011c97c4a1088da86f5a13ab6c99e9725087d990624767adf440
- MD5 f6f0520ea8f6c28096c6a853ca751071
- SHA1 79e73abb248a6a94b63a0e947903139d3ed5e266
- SHA512 482da0874f46c952d8e88cfb28437461da89521e1b7e07a999a65fe4a353940335a8e78d5ac30d6b57240599b004d6909091327a11a5454b0248754b98164e96
- SSDEEP 786432:zyZ/K0ttYZTayZ/K0ttYZTGyZ/K0ttYZTayZ/K0ttYZTLA:uZ/K0ttYRRZ/K0ttYRdZ/K0ttYRRZ/Ki
- TLSH T163475B13F6E540E9E0AAD134CA369631EB72BC564BF1A5DF2240B6D51E33AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_f6f0520ea8f6c28096c6a853ca751071_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_f6f0520ea8f6c28096c6a853ca751071_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_f6f0520ea8f6c28096c6a853ca751071_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 24.6MB
- SHA256 b915376b8097011c97c4a1088da86f5a13ab6c99e9725087d990624767adf440
- MD5 f6f0520ea8f6c28096c6a853ca751071
- SHA1 79e73abb248a6a94b63a0e947903139d3ed5e266
- SHA512 482da0874f46c952d8e88cfb28437461da89521e1b7e07a999a65fe4a353940335a8e78d5ac30d6b57240599b004d6909091327a11a5454b0248754b98164e96
- SSDEEP 786432:zyZ/K0ttYZTayZ/K0ttYZTGyZ/K0ttYZTayZ/K0ttYZTLA:uZ/K0ttYRRZ/K0ttYRdZ/K0ttYRRZ/Ki
- TLSH T163475B13F6E540E9E0AAD134CA369631EB72BC564BF1A5DF2240B6D51E33AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application