General
- Target 2026-08-12_9577a9475852de4beb1c128e17e1785b_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 8.3MB
- Sample260813-g2atfshc56
- SHA256 47f9a8207e50411f2515aa68a1591dfe351a3dd1f6b9eff121a342abb387e9d9
- MD5 9577a9475852de4beb1c128e17e1785b
- SHA1 3dce88374d01383f118868309f1c517bf4e2c713
- SHA512 7be5d2ad7bc06ba4e6b9831e6b934ed22bc6066ee00cf52b0a241104e0a7a19dface65d5e77286b84bae4a75101e63a5bb050ba86c709192192f53ea1b6acb2e
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftChu5x6M1uWQtZ/K0tGOFWVRuLftCT:JSWyZ/K0ttYVAAmSWyZ/K0ttYVAAT
- TLSH T16B966B13F58500E9D199D178CF4A9332EB62B88907F2B6EF365097D12E27AE07B39714
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_9577a9475852de4beb1c128e17e1785b_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_9577a9475852de4beb1c128e17e1785b_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_9577a9475852de4beb1c128e17e1785b_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 8.3MB
- SHA256 47f9a8207e50411f2515aa68a1591dfe351a3dd1f6b9eff121a342abb387e9d9
- MD5 9577a9475852de4beb1c128e17e1785b
- SHA1 3dce88374d01383f118868309f1c517bf4e2c713
- SHA512 7be5d2ad7bc06ba4e6b9831e6b934ed22bc6066ee00cf52b0a241104e0a7a19dface65d5e77286b84bae4a75101e63a5bb050ba86c709192192f53ea1b6acb2e
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftChu5x6M1uWQtZ/K0tGOFWVRuLftCT:JSWyZ/K0ttYVAAmSWyZ/K0ttYVAAT
- TLSH T16B966B13F58500E9D199D178CF4A9332EB62B88907F2B6EF365097D12E27AE07B39714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry