General
- Target 2026-08-16_866a75e3e44491900da98a30acbfc9d1_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 5.6MB
- Sample260816-h35kwsscpg
- SHA256 5617f03cb650bc343b81ddadff372572462aeb87bb50c49f2624a11ec3cad15b
- MD5 866a75e3e44491900da98a30acbfc9d1
- SHA1 1d2cfe1f0c68fc52e2472c6ad045ecde2cb1c217
- SHA512 e49c71b81ca24299244e8f81d3e3643b9a7ef57d16fea7830fa2d2ebdcde9d8e5b6f7b083000a56debf02375acabb9d3b31866d512ea0abbbcd3ce0e315fa326
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftChu5x6M1uWp:JSWyZ/K0ttYVAAmSWp
- TLSH T1DA566B13F58500E9D159D078CF5AA332EB22B88907F1A6EF2650DBD12E37AD07B39725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_866a75e3e44491900da98a30acbfc9d1_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_866a75e3e44491900da98a30acbfc9d1_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_866a75e3e44491900da98a30acbfc9d1_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 5.6MB
- SHA256 5617f03cb650bc343b81ddadff372572462aeb87bb50c49f2624a11ec3cad15b
- MD5 866a75e3e44491900da98a30acbfc9d1
- SHA1 1d2cfe1f0c68fc52e2472c6ad045ecde2cb1c217
- SHA512 e49c71b81ca24299244e8f81d3e3643b9a7ef57d16fea7830fa2d2ebdcde9d8e5b6f7b083000a56debf02375acabb9d3b31866d512ea0abbbcd3ce0e315fa326
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftChu5x6M1uWp:JSWyZ/K0ttYVAAmSWp
- TLSH T1DA566B13F58500E9D159D078CF5AA332EB22B88907F1A6EF2650DBD12E37AD07B39725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry