General
- Target 2026-06-26_e415ecdc25ec4ea1293a1792ec153b52_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- Sample260629-nnnaysdy8p
- SHA256 5df16524ae0edb5093eaa7a65633f29643aa951bdc2b34184d0bd696b3d7ecf3
- MD5 e415ecdc25ec4ea1293a1792ec153b52
- SHA1 abf849adc0be2e707e8220eb0e0e2cb807440d06
- SHA512 0b91e009837a7b7f8bb9efffd21ee9b5d312ab7c6883966187578da731ba8a8966a6a6b01b307304d94f0f729cb043550754dff7f03217f0bfe5b9b3207ede7e
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFou6:0NA1Yakeer5+nsoX
- TLSH T1F105A4A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_e415ecdc25ec4ea1293a1792ec153b52_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_e415ecdc25ec4ea1293a1792ec153b52_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_e415ecdc25ec4ea1293a1792ec153b52_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- SHA256 5df16524ae0edb5093eaa7a65633f29643aa951bdc2b34184d0bd696b3d7ecf3
- MD5 e415ecdc25ec4ea1293a1792ec153b52
- SHA1 abf849adc0be2e707e8220eb0e0e2cb807440d06
- SHA512 0b91e009837a7b7f8bb9efffd21ee9b5d312ab7c6883966187578da731ba8a8966a6a6b01b307304d94f0f729cb043550754dff7f03217f0bfe5b9b3207ede7e
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFou6:0NA1Yakeer5+nsoX
- TLSH T1F105A4A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Contacts a large (989) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Adds Run key to start application
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.