General
- Target 2026-06-04_b9c2d081c403d52ad7515c731fca28c9_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 10.4MB
- Sample260604-sdlrlahy5n
- SHA256 22b69bc00a51fa8eefbcda4d8b2406a93daa1ae073ae7e644b7328627643e7c5
- MD5 b9c2d081c403d52ad7515c731fca28c9
- SHA1 408d2b1de54945b134e188f0a24249efe29c6a5a
- SHA512 7d4198f4d9dc39fd28a1b7ecfbd43ab62f7eabaab8829dfa3c216f35c8d981de877cb995d77ec2c144bafa61194e63d29d5004470fe43090dce1adb6112d4bf5
- SSDEEP 98304:nu5x6M1WoDDklJ6qooq2VjnmLu5x6M1WoDDklJ6qooq2VjnmWj:Qi8kL2Gnhi8kL2Gn/j
- TLSH T1D6B69E0676E881B9E1BAC73496668632F7727C054B30D7DF4295B61E2D33BD09E39322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_b9c2d081c403d52ad7515c731fca28c9_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_b9c2d081c403d52ad7515c731fca28c9_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_b9c2d081c403d52ad7515c731fca28c9_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 10.4MB
- SHA256 22b69bc00a51fa8eefbcda4d8b2406a93daa1ae073ae7e644b7328627643e7c5
- MD5 b9c2d081c403d52ad7515c731fca28c9
- SHA1 408d2b1de54945b134e188f0a24249efe29c6a5a
- SHA512 7d4198f4d9dc39fd28a1b7ecfbd43ab62f7eabaab8829dfa3c216f35c8d981de877cb995d77ec2c144bafa61194e63d29d5004470fe43090dce1adb6112d4bf5
- SSDEEP 98304:nu5x6M1WoDDklJ6qooq2VjnmLu5x6M1WoDDklJ6qooq2VjnmWj:Qi8kL2Gnhi8kL2Gn/j
- TLSH T1D6B69E0676E881B9E1BAC73496668632F7727C054B30D7DF4295B61E2D33BD09E39322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry