General
- Target 2026-08-17_f96fd9183e3be9ae0dc6c94ce21ac32d_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- Sample260817-b31hlsdj7s
- SHA256 8a4e4faa2eba6168e9612d2ccb9747382726f635d653967098df1e0e7bfe59a1
- MD5 f96fd9183e3be9ae0dc6c94ce21ac32d
- SHA1 3c5dbbd099ac3bae7d5f1f32450f21ef20fb2009
- SHA512 9a69ca8613d7975bd4e039cce982a28828346ad0dca70a12d93166638ccfe6ae9e1e5eca7ce001ed9b4b869b3520414f1c2ba2159d791115637dbca8768d7c69
- SSDEEP 12288:GaoVql+84YWi3drBRy9hdFIdhoyYTiuWX+:GDVqlzSi/RyhdshPmiuWX+
- TLSH T18D947C1632D44EF5E1BF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_f96fd9183e3be9ae0dc6c94ce21ac32d_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_f96fd9183e3be9ae0dc6c94ce21ac32d_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_f96fd9183e3be9ae0dc6c94ce21ac32d_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- SHA256 8a4e4faa2eba6168e9612d2ccb9747382726f635d653967098df1e0e7bfe59a1
- MD5 f96fd9183e3be9ae0dc6c94ce21ac32d
- SHA1 3c5dbbd099ac3bae7d5f1f32450f21ef20fb2009
- SHA512 9a69ca8613d7975bd4e039cce982a28828346ad0dca70a12d93166638ccfe6ae9e1e5eca7ce001ed9b4b869b3520414f1c2ba2159d791115637dbca8768d7c69
- SSDEEP 12288:GaoVql+84YWi3drBRy9hdFIdhoyYTiuWX+:GDVqlzSi/RyhdshPmiuWX+
- TLSH T18D947C1632D44EF5E1BF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory