General
- Target 2026-06-02_22d08ae9da734d2a2559048f988299fe_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 15.5MB
- Sample260602-nn7dtsc13m
- SHA256 19d1122c736d1f9ca914dca706e638d9ce2c326875cd278649dbb12479bbaa56
- MD5 22d08ae9da734d2a2559048f988299fe
- SHA1 305b29dbe895020b488180e2a992cef58ea7879f
- SHA512 ff0aff2c3d9b16b15cb9e12c47fd781ee5e103ffc1aa6856e95bf11a82c37b16f5ae18caca97d6d099739b783340c49bfd2427f87529419fee20389b739bf0e3
- SSDEEP 196608:l8Vb618U68Vb618US18U68Vb618U68Vb618US18UTfGn:2cDcyDcDcyXfG
- TLSH T170F68D17B7A840F5D06AD57486568636EB72BC120B31ABDF43A0F61D2E33AD05F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_22d08ae9da734d2a2559048f988299fe_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_22d08ae9da734d2a2559048f988299fe_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_22d08ae9da734d2a2559048f988299fe_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 15.5MB
- SHA256 19d1122c736d1f9ca914dca706e638d9ce2c326875cd278649dbb12479bbaa56
- MD5 22d08ae9da734d2a2559048f988299fe
- SHA1 305b29dbe895020b488180e2a992cef58ea7879f
- SHA512 ff0aff2c3d9b16b15cb9e12c47fd781ee5e103ffc1aa6856e95bf11a82c37b16f5ae18caca97d6d099739b783340c49bfd2427f87529419fee20389b739bf0e3
- SSDEEP 196608:l8Vb618U68Vb618US18U68Vb618U68Vb618US18UTfGn:2cDcyDcDcyXfG
- TLSH T170F68D17B7A840F5D06AD57486568636EB72BC120B31ABDF43A0F61D2E33AD05F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry