General
- Target 2026-06-27_dd33183fee9fcb22d2a7e2643d952ffd_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- Sample260629-cmwp6ab19k
- SHA256 dcf5aa631a81d6f009cd692a1c909940b1cda356997d637c830fb75273295d90
- MD5 dd33183fee9fcb22d2a7e2643d952ffd
- SHA1 8e56d04446885fd59e4fd188363e788dda59d075
- SHA512 da51916573e3d479ebfae75485a11947ea9a8534893cc87fdebf604e7858d5a7bb5c7120876485a4a29334af95b07a6b6af1f95a913e16685044ef1cb5688769
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFouf:0NA1Yakeer5+nsoA
- TLSH T1BD05A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_dd33183fee9fcb22d2a7e2643d952ffd_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_dd33183fee9fcb22d2a7e2643d952ffd_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_dd33183fee9fcb22d2a7e2643d952ffd_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- SHA256 dcf5aa631a81d6f009cd692a1c909940b1cda356997d637c830fb75273295d90
- MD5 dd33183fee9fcb22d2a7e2643d952ffd
- SHA1 8e56d04446885fd59e4fd188363e788dda59d075
- SHA512 da51916573e3d479ebfae75485a11947ea9a8534893cc87fdebf604e7858d5a7bb5c7120876485a4a29334af95b07a6b6af1f95a913e16685044ef1cb5688769
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFouf:0NA1Yakeer5+nsoA
- TLSH T1BD05A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Contacts a large (1106) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Adds Run key to start application