General
- Target 2026-08-13_7e2aa9c1ebefd53c339bd9a0f208a66c_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 20.6MB
- Sample260813-e4dl1sbk4y
- SHA256 9decbb74238b66e27b5d5fed1105ca3424855270c689d6390519a4038f2767d1
- MD5 7e2aa9c1ebefd53c339bd9a0f208a66c
- SHA1 ae79c4b70b99cdb88be3d38d7035567b59d65caa
- SHA512 37d4974139804886a06497989a58d7a2aa24769f138df402eea01c81e94ef57423dce4d5acdfec345fc79bba39bb660bd02716f636caddb2da6a01186c9f3d74
- SSDEEP 393216:zyZ/K0ttYZTayZ/K0ttYZTGyZ/K0ttYZTayZ/K0ttYZTZD:zyZ/K0ttYZTayZ/K0ttYZTGyZ/K0ttYs
- TLSH T1BE276B03F2E940E9E1AAD174CE3593319B32BC5A8BF1A5DF224076D41E76AD07B38725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_7e2aa9c1ebefd53c339bd9a0f208a66c_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_7e2aa9c1ebefd53c339bd9a0f208a66c_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_7e2aa9c1ebefd53c339bd9a0f208a66c_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 20.6MB
- SHA256 9decbb74238b66e27b5d5fed1105ca3424855270c689d6390519a4038f2767d1
- MD5 7e2aa9c1ebefd53c339bd9a0f208a66c
- SHA1 ae79c4b70b99cdb88be3d38d7035567b59d65caa
- SHA512 37d4974139804886a06497989a58d7a2aa24769f138df402eea01c81e94ef57423dce4d5acdfec345fc79bba39bb660bd02716f636caddb2da6a01186c9f3d74
- SSDEEP 393216:zyZ/K0ttYZTayZ/K0ttYZTGyZ/K0ttYZTayZ/K0ttYZTZD:zyZ/K0ttYZTayZ/K0ttYZTGyZ/K0ttYs
- TLSH T1BE276B03F2E940E9E1AAD174CE3593319B32BC5A8BF1A5DF224076D41E76AD07B38725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry