General
- Target 2026-05-22_34ff5eae15ae21b23b18123644e09da2_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.4MB
- Sample260522-drd7cags5t
- SHA256 1aee8a6216d959dc29e399a3b5dbfad83efb605661621e708e73c2fac724cde5
- MD5 34ff5eae15ae21b23b18123644e09da2
- SHA1 510267a21eba12957d3c6183f5612cb6c904a65e
- SHA512 1224c75f053d3eea2e7465bda5f6196e8600b181126550ec562a7f0baf11dc713d982d95ad7a22bebe718aa26124455c3b8d0896ec13c1609c17f0fc3dc7b931
- SSDEEP 98304:+0nAAYEptU4UUU3UUUPhOQA91pH2WpjHrgBFFu416AWvc:TN/U4UUU3UUUsQmHpn6F44IAWvc
- TLSH T18C764AA162A7A0FDE46ED075CB2A8771E6713C278071930B12BCFA563F736142D69723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_34ff5eae15ae21b23b18123644e09da2_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_34ff5eae15ae21b23b18123644e09da2_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.4MB
- SHA256 1aee8a6216d959dc29e399a3b5dbfad83efb605661621e708e73c2fac724cde5
- MD5 34ff5eae15ae21b23b18123644e09da2
- SHA1 510267a21eba12957d3c6183f5612cb6c904a65e
- SHA512 1224c75f053d3eea2e7465bda5f6196e8600b181126550ec562a7f0baf11dc713d982d95ad7a22bebe718aa26124455c3b8d0896ec13c1609c17f0fc3dc7b931
- SSDEEP 98304:+0nAAYEptU4UUU3UUUPhOQA91pH2WpjHrgBFFu416AWvc:TN/U4UUU3UUUsQmHpn6F44IAWvc
- TLSH T18C764AA162A7A0FDE46ED075CB2A8771E6713C278071930B12BCFA563F736142D69723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE