General
- Target 2026-06-27_f3a0e4303c612cea9b7ddc9fad66b085_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 66.6MB
- Sample260629-brfdasas9s
- SHA256 bb20cf083dc03e7cb0f1d3c56597fca8a5acd01b81abf314f33c304b89dbdfe4
- MD5 f3a0e4303c612cea9b7ddc9fad66b085
- SHA1 a17e10eab4889493f995af96f17bef6705747af9
- SHA512 a4f10128a5818c02ec2cec481b37c7dff30121e2c4c358cb65662a3b16ac78e22f8c5415e3455dd36059898556c1496757337c551bafb4d289e1c2b1d471ccd7
- SSDEEP 393216:2c7cSc7cHc7cSc7c7WqQjpmc7cSc7cHcVc7cSc7cHc+c7cSc7cHc7cehgnX:tYRY8YRYifjp9YRY8uYRY8VYRY8YehgX
- TLSH T16EE77C17F6A440F5D16E95708B6A9232FA73BC520B3097CB53A4C62D1F336D06E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_f3a0e4303c612cea9b7ddc9fad66b085_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_f3a0e4303c612cea9b7ddc9fad66b085_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_f3a0e4303c612cea9b7ddc9fad66b085_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 66.6MB
- SHA256 bb20cf083dc03e7cb0f1d3c56597fca8a5acd01b81abf314f33c304b89dbdfe4
- MD5 f3a0e4303c612cea9b7ddc9fad66b085
- SHA1 a17e10eab4889493f995af96f17bef6705747af9
- SHA512 a4f10128a5818c02ec2cec481b37c7dff30121e2c4c358cb65662a3b16ac78e22f8c5415e3455dd36059898556c1496757337c551bafb4d289e1c2b1d471ccd7
- SSDEEP 393216:2c7cSc7cHc7cSc7c7WqQjpmc7cSc7cHcVc7cSc7cHc+c7cSc7cHc7cehgnX:tYRY8YRYifjp9YRY8uYRY8VYRY8YehgX
- TLSH T16EE77C17F6A440F5D16E95708B6A9232FA73BC520B3097CB53A4C62D1F336D06E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry