General
- Target 2026-06-29_b821cda1e782c0abbc67de7e6b7bd264_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 3.0MB
- Sample260630-e29lnsev9t
- SHA256 2b439f43b95c2ebf6eba03ae457f6ae61cd4ec7d042e971f09a1bd11c1903fdb
- MD5 b821cda1e782c0abbc67de7e6b7bd264
- SHA1 5c2cedea33094679d429c0136aa267faaac42707
- SHA512 e445c3b1d54e32c9f111120cc39784f400a002ac0f57951f6de0e9fe9c11ae5c2ba6e9ddb9775336284a2355736538ae3d92a6028e34be57fc0eff2ae8be7708
- SSDEEP 49152:C7KxEkhWF+P5tmfGAWLSzeW0ayGPeXGGmJ7kgkqjV:S+PBpi9hkgkqjV
- TLSH T16DE58C62A24C42EDD81AC17482774B31AD617E4537256EFF07687A662F33AE40F3B712
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_b821cda1e782c0abbc67de7e6b7bd264_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_b821cda1e782c0abbc67de7e6b7bd264_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 3.0MB
- SHA256 2b439f43b95c2ebf6eba03ae457f6ae61cd4ec7d042e971f09a1bd11c1903fdb
- MD5 b821cda1e782c0abbc67de7e6b7bd264
- SHA1 5c2cedea33094679d429c0136aa267faaac42707
- SHA512 e445c3b1d54e32c9f111120cc39784f400a002ac0f57951f6de0e9fe9c11ae5c2ba6e9ddb9775336284a2355736538ae3d92a6028e34be57fc0eff2ae8be7708
- SSDEEP 49152:C7KxEkhWF+P5tmfGAWLSzeW0ayGPeXGGmJ7kgkqjV:S+PBpi9hkgkqjV
- TLSH T16DE58C62A24C42EDD81AC17482774B31AD617E4537256EFF07687A662F33AE40F3B712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.