General
- Target 2026-06-02_23c2f83fd8f8bdc0df0d48946a95df79_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 9.7MB
- Sample260602-bc9ctsbx2l
- SHA256 00b756f18d17abb989f2497297187a499c48f5c13953020f0285d0f9d73972d9
- MD5 23c2f83fd8f8bdc0df0d48946a95df79
- SHA1 cfb3a560dffae5cc7f6d37a39ff2d23772c71e4c
- SHA512 dee20ea0d589831a15abc0711d0e7592933990b6bb7e0ebce91c004e0b07a502c82faebbb52590646395d8672af4b48c9ea7fb93363f7121c9c8cea7b00babe6
- SSDEEP 98304:+e5x6c1QVb6nUm8oe5x6c1QVb6nUm8ne5x6c1QVb6nUm8oe5x6c1QVb6nUm8Exws:l8Vb618L8Vb618A8Vb618L8Vb618sw8
- TLSH T1C1A69D17E69440F5D16E993087AA9232FB73B8120B7197CB43A4C62D1F336D06E7A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_23c2f83fd8f8bdc0df0d48946a95df79_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_23c2f83fd8f8bdc0df0d48946a95df79_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_23c2f83fd8f8bdc0df0d48946a95df79_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 9.7MB
- SHA256 00b756f18d17abb989f2497297187a499c48f5c13953020f0285d0f9d73972d9
- MD5 23c2f83fd8f8bdc0df0d48946a95df79
- SHA1 cfb3a560dffae5cc7f6d37a39ff2d23772c71e4c
- SHA512 dee20ea0d589831a15abc0711d0e7592933990b6bb7e0ebce91c004e0b07a502c82faebbb52590646395d8672af4b48c9ea7fb93363f7121c9c8cea7b00babe6
- SSDEEP 98304:+e5x6c1QVb6nUm8oe5x6c1QVb6nUm8ne5x6c1QVb6nUm8oe5x6c1QVb6nUm8Exws:l8Vb618L8Vb618A8Vb618L8Vb618sw8
- TLSH T1C1A69D17E69440F5D16E993087AA9232FB73B8120B7197CB43A4C62D1F336D06E7A727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry