General
- Target 2026-08-15_0d1aaa8a9cd52f4d254e3472ba6dfad6_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 11.0MB
- Sample260815-lt6ndafa87
- SHA256 6f4d6021d1593b4d3cf7c555566b12b48b34525f7832e4523d6843cbb67348ee
- MD5 0d1aaa8a9cd52f4d254e3472ba6dfad6
- SHA1 1fbf02dc46582a5ce46b06ff55451160c6c30211
- SHA512 59c7abff414a934d01bb58897b60e39194724a7ac01b8ad36b0ae6eda0b0f194e2a4a9333b497ac68e7a701337fe3856b6572087f4b8d7ed68634241310fb7e7
- SSDEEP 196608:JSWyZ/K0ttYVAATwSWyZ/K0ttYVAATu5w:zyZ/K0ttYZTayZ/K0ttYZTUw
- TLSH T175C67C03F2E940E9E1AAD174CE3593319B72BC5A8BF1A5DF224076D41E36AD07B38725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_0d1aaa8a9cd52f4d254e3472ba6dfad6_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_0d1aaa8a9cd52f4d254e3472ba6dfad6_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_0d1aaa8a9cd52f4d254e3472ba6dfad6_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 11.0MB
- SHA256 6f4d6021d1593b4d3cf7c555566b12b48b34525f7832e4523d6843cbb67348ee
- MD5 0d1aaa8a9cd52f4d254e3472ba6dfad6
- SHA1 1fbf02dc46582a5ce46b06ff55451160c6c30211
- SHA512 59c7abff414a934d01bb58897b60e39194724a7ac01b8ad36b0ae6eda0b0f194e2a4a9333b497ac68e7a701337fe3856b6572087f4b8d7ed68634241310fb7e7
- SSDEEP 196608:JSWyZ/K0ttYVAATwSWyZ/K0ttYVAATu5w:zyZ/K0ttYZTayZ/K0ttYZTUw
- TLSH T175C67C03F2E940E9E1AAD174CE3593319B72BC5A8BF1A5DF224076D41E36AD07B38725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry