General
- Target 2026-08-13_395fddb0bb27de2bde1354fb2dc143bc_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 16.8MB
- Sample260813-lz2xdawsb1
- SHA256 b2846070bc4c85e77d3b9068c96f95d84b05800483535c76a3aee8d9dd32bef8
- MD5 395fddb0bb27de2bde1354fb2dc143bc
- SHA1 7a0839bba7a912f2770dc143612d301141c39be9
- SHA512 5736d3cad013779c2d5720e114d08a79b1e46572d91d603bc1325d260faf1d89fecbaf00da9bc877f34e8b6a92c8d8da9c2ec3216467d98f7236bf65c2d61365
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6q7GgHIKgM/u5x6M1WoDDklJ6qCu5x6M1e:Qi8kLri8kL5oKmi8kLri8kL5oKycGba
- TLSH T155079F03B7D400ADE06E863496669632EA72BC461B21D7CF5790F65E2E73BD09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_395fddb0bb27de2bde1354fb2dc143bc_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_395fddb0bb27de2bde1354fb2dc143bc_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_395fddb0bb27de2bde1354fb2dc143bc_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 16.8MB
- SHA256 b2846070bc4c85e77d3b9068c96f95d84b05800483535c76a3aee8d9dd32bef8
- MD5 395fddb0bb27de2bde1354fb2dc143bc
- SHA1 7a0839bba7a912f2770dc143612d301141c39be9
- SHA512 5736d3cad013779c2d5720e114d08a79b1e46572d91d603bc1325d260faf1d89fecbaf00da9bc877f34e8b6a92c8d8da9c2ec3216467d98f7236bf65c2d61365
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6q7GgHIKgM/u5x6M1WoDDklJ6qCu5x6M1e:Qi8kLri8kL5oKmi8kLri8kL5oKycGba
- TLSH T155079F03B7D400ADE06E863496669632EA72BC461B21D7CF5790F65E2E73BD09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry