General
- Target 2026-06-04_f41b089e7d4794450dd5fa06241f8a71_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 8.4MB
- Sample260604-tzjpssaz4w
- SHA256 b0a29e6303fd208e0d2fd1d09024ab68262223a069181ee1d27e20a6b0e52413
- MD5 f41b089e7d4794450dd5fa06241f8a71
- SHA1 c1d0d7a670215e60fafd27fc18b984f526b71829
- SHA512 679a9c8be725eb43cb1b3da41b6df54cd83eb09e7194981ba5c0893121604856f32180eb6edd456e51b9e16b3f11a5b890b8e6b2d96b6bb5388ab14c0d0599f5
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qJoq2Vjnm:Qi8kLri8kLDGn
- TLSH T192968E06B6E441A9E1BE8634D6668632F772BC454B20D7DF56D0F62E1E33BC09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_f41b089e7d4794450dd5fa06241f8a71_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_f41b089e7d4794450dd5fa06241f8a71_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_f41b089e7d4794450dd5fa06241f8a71_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 8.4MB
- SHA256 b0a29e6303fd208e0d2fd1d09024ab68262223a069181ee1d27e20a6b0e52413
- MD5 f41b089e7d4794450dd5fa06241f8a71
- SHA1 c1d0d7a670215e60fafd27fc18b984f526b71829
- SHA512 679a9c8be725eb43cb1b3da41b6df54cd83eb09e7194981ba5c0893121604856f32180eb6edd456e51b9e16b3f11a5b890b8e6b2d96b6bb5388ab14c0d0599f5
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qJoq2Vjnm:Qi8kLri8kLDGn
- TLSH T192968E06B6E441A9E1BE8634D6668632F772BC454B20D7DF56D0F62E1E33BC09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry