General
- Target 2026-08-13_3877bec8c290b72851225ad12e58867f_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 17.9MB
- Sample260813-fxpals1tf1
- SHA256 0344f75da08d9ef7514d8367378e367403e7536bf4d351cac3293c6349bd03b8
- MD5 3877bec8c290b72851225ad12e58867f
- SHA1 ccf7b00a3f0c23ebe4697667f3ca05810084cdee
- SHA512 4c00a49f5e80135a61219b874d82a5c063d9f7243c10b6b2ae69c8194b7e0b7110c05de2974bf8c2beb264d7431718903210db8949ab1ddb30c146cfa38dbaa3
- SSDEEP 393216:zyZ/K0ttYZMyZ/K0ttYZBPyZ/K0ttYZMyZ/K0ttYZBwK:zyZ/K0ttYZMyZ/K0ttYZRyZ/K0ttYZMh
- TLSH T132175A13F19600E9D059D079CF4A9332EB62BC890BF1A6EF2650A7D12E37AD07B39715
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_3877bec8c290b72851225ad12e58867f_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_3877bec8c290b72851225ad12e58867f_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_3877bec8c290b72851225ad12e58867f_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 17.9MB
- SHA256 0344f75da08d9ef7514d8367378e367403e7536bf4d351cac3293c6349bd03b8
- MD5 3877bec8c290b72851225ad12e58867f
- SHA1 ccf7b00a3f0c23ebe4697667f3ca05810084cdee
- SHA512 4c00a49f5e80135a61219b874d82a5c063d9f7243c10b6b2ae69c8194b7e0b7110c05de2974bf8c2beb264d7431718903210db8949ab1ddb30c146cfa38dbaa3
- SSDEEP 393216:zyZ/K0ttYZMyZ/K0ttYZBPyZ/K0ttYZMyZ/K0ttYZBwK:zyZ/K0ttYZMyZ/K0ttYZRyZ/K0ttYZMh
- TLSH T132175A13F19600E9D059D079CF4A9332EB62BC890BF1A6EF2650A7D12E37AD07B39715
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry