General
- Target 2026-08-13_74d228368555b9fc72118f2d2936fb82_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 8.3MB
- Sample260813-e7z97a1hrf
- SHA256 9cefaf8fef0a1b605716f4bd59072bc4c16e03f7ce4efdf02a1cc497bbdfc935
- MD5 74d228368555b9fc72118f2d2936fb82
- SHA1 9419ada6d7d1d0d223a6336b1cd2d825874cba19
- SHA512 28ac0fe673bee192547ac80316408ef1e345784d4e86f16611b89dae48d6b58d9276ca834b3927ee735e0918f880e26c22d4978b4b3f1ebb98d20476b158c9b5
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftChu5x6M1uWQtZ/K0tGOFWVRuLftCBj:JSWyZ/K0ttYVAAmSWyZ/K0ttYVAABj
- TLSH T1C4966B13F58500E9D199D178CF4A9332EB62B88907F2B6EF365097D12E27AE07B39714
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_74d228368555b9fc72118f2d2936fb82_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_74d228368555b9fc72118f2d2936fb82_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_74d228368555b9fc72118f2d2936fb82_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 8.3MB
- SHA256 9cefaf8fef0a1b605716f4bd59072bc4c16e03f7ce4efdf02a1cc497bbdfc935
- MD5 74d228368555b9fc72118f2d2936fb82
- SHA1 9419ada6d7d1d0d223a6336b1cd2d825874cba19
- SHA512 28ac0fe673bee192547ac80316408ef1e345784d4e86f16611b89dae48d6b58d9276ca834b3927ee735e0918f880e26c22d4978b4b3f1ebb98d20476b158c9b5
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftChu5x6M1uWQtZ/K0tGOFWVRuLftCBj:JSWyZ/K0ttYVAAmSWyZ/K0ttYVAABj
- TLSH T1C4966B13F58500E9D199D178CF4A9332EB62B88907F2B6EF365097D12E27AE07B39714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry