General
- Target 2026-08-12_898182071a3ba6d529c8ab5a94ee920c_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 16.7MB
- Sample260813-g4algacn5y
- SHA256 883e3ea42ef49fd88667db4910dbaeab85d56cc95cf2c3af2cedf264eb92b570
- MD5 898182071a3ba6d529c8ab5a94ee920c
- SHA1 288c0c5c3502e4d97ef242cfb028e331cabf171c
- SHA512 0f0939bd04acaf50018bb5199c5201c17571a215ad073020fa1340364ffeb60cd01d2c79ac60b02cdbc2ec22746bb482238035ad446eedc7e1732987697e18ff
- SSDEEP 393216:zyZ/K0ttYZMyZ/K0ttYZBPyZ/K0ttYZMyZ/K0ttYZBED:zyZ/K0ttYZMyZ/K0ttYZRyZ/K0ttYZMg
- TLSH T122076B13F58500E9D199D178CF4A9332EB62B88907F2B6EF365097D12E27AE07B39714
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_898182071a3ba6d529c8ab5a94ee920c_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_898182071a3ba6d529c8ab5a94ee920c_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_898182071a3ba6d529c8ab5a94ee920c_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 16.7MB
- SHA256 883e3ea42ef49fd88667db4910dbaeab85d56cc95cf2c3af2cedf264eb92b570
- MD5 898182071a3ba6d529c8ab5a94ee920c
- SHA1 288c0c5c3502e4d97ef242cfb028e331cabf171c
- SHA512 0f0939bd04acaf50018bb5199c5201c17571a215ad073020fa1340364ffeb60cd01d2c79ac60b02cdbc2ec22746bb482238035ad446eedc7e1732987697e18ff
- SSDEEP 393216:zyZ/K0ttYZMyZ/K0ttYZBPyZ/K0ttYZMyZ/K0ttYZBED:zyZ/K0ttYZMyZ/K0ttYZRyZ/K0ttYZMg
- TLSH T122076B13F58500E9D199D178CF4A9332EB62B88907F2B6EF365097D12E27AE07B39714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry