General
- Target 2026-06-29_b447ac773623a0cd05d9f43681b86895_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 13.6MB
- Sample260630-e9rqtsfs2p
- SHA256 2e90e1f31f4f4444e8a8bf482d573cee1e38e5bf0b83672466e84e4c3b864bc3
- MD5 b447ac773623a0cd05d9f43681b86895
- SHA1 ad0a4f8c007580fc2d2373c590c37794747eda8b
- SHA512 2b579808ffec5bb01b61fd55c9013235ddcaf6a143396d5248d471475a82f9ebebfdc7c623dbd082b17de0017866507e91b2e7c3d7633606738e8f4c6cd978c0
- SSDEEP 196608:l8Vb618U68Vbb8Vb618N8Vb618U68Vbb8Vb618A:2cD2cpcD2cf
- TLSH T19FE69D17F69444F5D17A99308AA69332EB72BC120B3197CF43A4E6191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_b447ac773623a0cd05d9f43681b86895_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_b447ac773623a0cd05d9f43681b86895_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_b447ac773623a0cd05d9f43681b86895_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 13.6MB
- SHA256 2e90e1f31f4f4444e8a8bf482d573cee1e38e5bf0b83672466e84e4c3b864bc3
- MD5 b447ac773623a0cd05d9f43681b86895
- SHA1 ad0a4f8c007580fc2d2373c590c37794747eda8b
- SHA512 2b579808ffec5bb01b61fd55c9013235ddcaf6a143396d5248d471475a82f9ebebfdc7c623dbd082b17de0017866507e91b2e7c3d7633606738e8f4c6cd978c0
- SSDEEP 196608:l8Vb618U68Vbb8Vb618N8Vb618U68Vbb8Vb618A:2cD2cpcD2cf
- TLSH T19FE69D17F69444F5D17A99308AA69332EB72BC120B3197CF43A4E6191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry