General
- Target 2026-08-13_a6f2e9576ac22a1c899892fef599079d_cobalt-strike_elex_emotet_icedid_remcos_vidar
- Size 36.7MB
- Sample260813-ejp5baaq4x
- SHA256 7bb589d66c8a9f9c32505e0836c050a5f18ee3040b6526610ee787e73ec8dc9c
- MD5 a6f2e9576ac22a1c899892fef599079d
- SHA1 170b7ba0839f3910b40afd60728727a24218791e
- SHA512 e0c6c183bd2f27819bd38ed06d2ccb211f4d32ceb6a663c3a855f0487b5119d834f75ae5373b0f92906b21290012298b74d904b2690b80f84676908005146d2f
- SSDEEP 786432:IkLDkLHkLDkL0kLDkLHkLDkLnkLDkLHkLDkL0kLX:t
- TLSH T118879D42B7E4407EF1BE4A30953A96329A76BD820B11DBCF56D4F61E2D327C09A31367
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_a6f2e9576ac22a1c899892fef599079d_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_a6f2e9576ac22a1c899892fef599079d_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_a6f2e9576ac22a1c899892fef599079d_cobalt-strike_elex_emotet_icedid_remcos_vidar
- Size 36.7MB
- SHA256 7bb589d66c8a9f9c32505e0836c050a5f18ee3040b6526610ee787e73ec8dc9c
- MD5 a6f2e9576ac22a1c899892fef599079d
- SHA1 170b7ba0839f3910b40afd60728727a24218791e
- SHA512 e0c6c183bd2f27819bd38ed06d2ccb211f4d32ceb6a663c3a855f0487b5119d834f75ae5373b0f92906b21290012298b74d904b2690b80f84676908005146d2f
- SSDEEP 786432:IkLDkLHkLDkL0kLDkLHkLDkLnkLDkLHkLDkL0kLX:t
- TLSH T118879D42B7E4407EF1BE4A30953A96329A76BD820B11DBCF56D4F61E2D327C09A31367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry