General
- Target 2026-06-05_f59303a9e9dceb39efc2277702b89c01_elex_emotet_glassworm_icedid_njrat_remcos
- Size 1.6MB
- Sample260605-rt43faa19j
- SHA256 dc63f6b748d6a3c753fabe4f9982dea2e899d403eb2e64dfaf22c8db39a51f1b
- MD5 f59303a9e9dceb39efc2277702b89c01
- SHA1 2f5c18bec2a53e27ac5e601c618ff88905015737
- SHA512 181cbd60281e285f3a251d820c1c9286181ba6563a5dad3079eaed6d37be7f6d30dc6759baf9bd925b3c21990ac8ab58f01bbcc06d3dd295acd85d0ec29856aa
- SSDEEP 24576:pEBzRGo4h5x6YnuquE25AZLfUg0nRiMHnWRHcfs64Kb+IoGM:poRg5x6c1fHLfU5nRdHnWRHcfXb+1
- TLSH T124759E16FAA444F1D2BA5D3059AA9332EB76B8120B31C7CB9364C61D1F236D0AD36737
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-05_f59303a9e9dceb39efc2277702b89c01_elex_emotet_glassworm_icedid_njrat_remcos.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-05_f59303a9e9dceb39efc2277702b89c01_elex_emotet_glassworm_icedid_njrat_remcos.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-05_f59303a9e9dceb39efc2277702b89c01_elex_emotet_glassworm_icedid_njrat_remcos
- Size 1.6MB
- SHA256 dc63f6b748d6a3c753fabe4f9982dea2e899d403eb2e64dfaf22c8db39a51f1b
- MD5 f59303a9e9dceb39efc2277702b89c01
- SHA1 2f5c18bec2a53e27ac5e601c618ff88905015737
- SHA512 181cbd60281e285f3a251d820c1c9286181ba6563a5dad3079eaed6d37be7f6d30dc6759baf9bd925b3c21990ac8ab58f01bbcc06d3dd295acd85d0ec29856aa
- SSDEEP 24576:pEBzRGo4h5x6YnuquE25AZLfUg0nRiMHnWRHcfs64Kb+IoGM:poRg5x6c1fHLfU5nRdHnWRHcfXb+1
- TLSH T124759E16FAA444F1D2BA5D3059AA9332EB76B8120B31C7CB9364C61D1F236D0AD36737
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry