General
- Target 2026-08-20_afda985e1aaac2984c044d5eefabdb80_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- Sample260820-nqwecada27
- SHA256 1490d079f8dd50105a436fc69013787a29448474796c99b69bc736a02a064758
- MD5 afda985e1aaac2984c044d5eefabdb80
- SHA1 0c074322625c61ac536c359743d465ef1750ff12
- SHA512 9ab2622dc94902eb47a13c4f812bf13a71e0750e2baab787b6ab5edbba786c2b4c569e7abd127f8805e0ea1c50cfa5c951b662c32963024d545374d52ee9d198
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWX7:GDVmpzSi/RyhdshPmiuWX7
- TLSH T19D947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_afda985e1aaac2984c044d5eefabdb80_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_afda985e1aaac2984c044d5eefabdb80_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_afda985e1aaac2984c044d5eefabdb80_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- SHA256 1490d079f8dd50105a436fc69013787a29448474796c99b69bc736a02a064758
- MD5 afda985e1aaac2984c044d5eefabdb80
- SHA1 0c074322625c61ac536c359743d465ef1750ff12
- SHA512 9ab2622dc94902eb47a13c4f812bf13a71e0750e2baab787b6ab5edbba786c2b4c569e7abd127f8805e0ea1c50cfa5c951b662c32963024d545374d52ee9d198
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWX7:GDVmpzSi/RyhdshPmiuWX7
- TLSH T19D947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory