General
- Target 2026-11-01_a1f7feebe6592092ec912a72a64776bd_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- Sample261102-qcgedact6n
- SHA256 d3f070b63d2c2d05e9548116dd293bc7ef7fdacba082628b59adcd4d27fa92b2
- MD5 a1f7feebe6592092ec912a72a64776bd
- SHA1 29aabbfbcc2deebfdec0561fa11ea7344b183919
- SHA512 9e7be2b4c9b95d08b4720eb351a73b6391685a2a28a31a8dfe7b7cf91b067fba2457d57e931a04295cd9f9b2d50b568ca4d016b15cb7885b9eca372a614cee75
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXC:GDVmpzSi/RyhdshPmiuWXC
- TLSH T102947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_a1f7feebe6592092ec912a72a64776bd_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_a1f7feebe6592092ec912a72a64776bd_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_a1f7feebe6592092ec912a72a64776bd_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
- Size 418KB
- SHA256 d3f070b63d2c2d05e9548116dd293bc7ef7fdacba082628b59adcd4d27fa92b2
- MD5 a1f7feebe6592092ec912a72a64776bd
- SHA1 29aabbfbcc2deebfdec0561fa11ea7344b183919
- SHA512 9e7be2b4c9b95d08b4720eb351a73b6391685a2a28a31a8dfe7b7cf91b067fba2457d57e931a04295cd9f9b2d50b568ca4d016b15cb7885b9eca372a614cee75
- SSDEEP 12288:GaoVmp+84YWi3drBRy9hdFIdhoyYTiuWXC:GDVmpzSi/RyhdshPmiuWXC
- TLSH T102947C1632D44EF5E1AF403088615A75E773BC200F219BEF43A4AF69BE326909D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory