General
- Target 2026-06-28_25cd5130828eb8c86001bd55c0f58e48_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- Sample260628-3tk54shv9m
- SHA256 da3d55db53b969c43e28cf5afc1f46025952827a8d1bd3d7c3dc8591be605f63
- MD5 25cd5130828eb8c86001bd55c0f58e48
- SHA1 182754fa1fe1d259675373917e88a064e3fd3913
- SHA512 facd741dd8efaec8bb8c4e0b07c14741c7f6c08586278d5483ba5a91c1e4f8637439c9742b8027a12aef99bd89bd3ce2eb8424ffcddaeacb049bc36b4f001258
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFouy:0NA1Yakeer5+nso1
- TLSH T19505A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_25cd5130828eb8c86001bd55c0f58e48_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_25cd5130828eb8c86001bd55c0f58e48_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win11ltsc2024-20260617-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_25cd5130828eb8c86001bd55c0f58e48_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- SHA256 da3d55db53b969c43e28cf5afc1f46025952827a8d1bd3d7c3dc8591be605f63
- MD5 25cd5130828eb8c86001bd55c0f58e48
- SHA1 182754fa1fe1d259675373917e88a064e3fd3913
- SHA512 facd741dd8efaec8bb8c4e0b07c14741c7f6c08586278d5483ba5a91c1e4f8637439c9742b8027a12aef99bd89bd3ce2eb8424ffcddaeacb049bc36b4f001258
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFouy:0NA1Yakeer5+nso1
- TLSH T19505A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Contacts a large (928) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Adds Run key to start application
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.