General
- Target 2026-06-04_ac56ee77a879bae3fac8eb6520a8bd65_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 628KB
- Sample260604-tmsryabs8m
- SHA256 0f9a8f14660021c88fd83c931034a3445121b3a0cce2a520958a9e11a2b9eadd
- MD5 ac56ee77a879bae3fac8eb6520a8bd65
- SHA1 4fdba45151ad22fa9dbb850b799c80707a18068c
- SHA512 e966477694e3db6248e7252ffba27ca32163691dd3e26bcef51f0934766c64cee32a7af26bcbd871bb6073792e67c362405c84501c4378314b71bd6b7a665f16
- SSDEEP 12288:27+abaH91qiMmmDhu9sx/RElA0iW6YoFdr1vhJizNPoCNsKLQdxG:27LsqiMmmDhu9sx/RElA0iW6hBhJiRHT
- TLSH T182D48D1AB7D401F9E07BD138C8929666F7B1740617308B9F13A0467B2F676A19F3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_ac56ee77a879bae3fac8eb6520a8bd65_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_ac56ee77a879bae3fac8eb6520a8bd65_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_ac56ee77a879bae3fac8eb6520a8bd65_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 628KB
- SHA256 0f9a8f14660021c88fd83c931034a3445121b3a0cce2a520958a9e11a2b9eadd
- MD5 ac56ee77a879bae3fac8eb6520a8bd65
- SHA1 4fdba45151ad22fa9dbb850b799c80707a18068c
- SHA512 e966477694e3db6248e7252ffba27ca32163691dd3e26bcef51f0934766c64cee32a7af26bcbd871bb6073792e67c362405c84501c4378314b71bd6b7a665f16
- SSDEEP 12288:27+abaH91qiMmmDhu9sx/RElA0iW6YoFdr1vhJizNPoCNsKLQdxG:27LsqiMmmDhu9sx/RElA0iW6hBhJiRHT
- TLSH T182D48D1AB7D401F9E07BD138C8929666F7B1740617308B9F13A0467B2F676A19F3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.