General
- Target 2026-10-26_726fc73a8b11cd613487c49ee33f326f_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- Sample261027-ryyffssv3l
- SHA256 4497ad69c3db8089e9e371a67686d2723fc6aa24c85d9e652e2ee7d70eca7bb3
- MD5 726fc73a8b11cd613487c49ee33f326f
- SHA1 5db0103f06da4941d3b0d9f393dbaf76d0cb51a2
- SHA512 d2b0faf28b669b5a688cf1d80e4789aabfce9c9e9c1d09aaa0a022614e1ba5b8a09198b2625296c5cf5ade0ec43d1229174273836cef85c52e8924afa672fe93
- SSDEEP 12288:GaoVrwc4Y7i3drBRy9hdFIdhoyYTiuWXP:GDVrnPi/RyhdshPmiuWXP
- TLSH T1EE94AE1672E044F5E1764031CC625E39E773FC700B319AAF4364AB6A9E326909D3BB67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_726fc73a8b11cd613487c49ee33f326f_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_726fc73a8b11cd613487c49ee33f326f_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_726fc73a8b11cd613487c49ee33f326f_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- SHA256 4497ad69c3db8089e9e371a67686d2723fc6aa24c85d9e652e2ee7d70eca7bb3
- MD5 726fc73a8b11cd613487c49ee33f326f
- SHA1 5db0103f06da4941d3b0d9f393dbaf76d0cb51a2
- SHA512 d2b0faf28b669b5a688cf1d80e4789aabfce9c9e9c1d09aaa0a022614e1ba5b8a09198b2625296c5cf5ade0ec43d1229174273836cef85c52e8924afa672fe93
- SSDEEP 12288:GaoVrwc4Y7i3drBRy9hdFIdhoyYTiuWXP:GDVrnPi/RyhdshPmiuWXP
- TLSH T1EE94AE1672E044F5E1764031CC625E39E773FC700B319AAF4364AB6A9E326909D3BB67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory