General
- Target 2026-06-30_1d0ea1938d54585f4ffe103592ce8d13_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 7.1MB
- Sample260701-am2v3aa13j
- SHA256 6fb37820e734671e7caac92da9a81fafd7eecb15286867faacb8141239ad131c
- MD5 1d0ea1938d54585f4ffe103592ce8d13
- SHA1 250b0c67f05a910087151b4ffbd72b51f33cc2f4
- SHA512 9514dc76b099e1b538160b023376f1166f01f25b50706dd272561a86593ff880ece4e04afdbd1f768a95fed0345c0d4e2ac046c38458166a298c21a484ac7a16
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb4e5x6c1QVb6nUm8ob:l8Vb618U68Vbb8Vb618ob
- TLSH T147769E17FA9444F5D17A99308AA69332EB72BC110B3197CF8364E6191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_1d0ea1938d54585f4ffe103592ce8d13_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_1d0ea1938d54585f4ffe103592ce8d13_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_1d0ea1938d54585f4ffe103592ce8d13_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 7.1MB
- SHA256 6fb37820e734671e7caac92da9a81fafd7eecb15286867faacb8141239ad131c
- MD5 1d0ea1938d54585f4ffe103592ce8d13
- SHA1 250b0c67f05a910087151b4ffbd72b51f33cc2f4
- SHA512 9514dc76b099e1b538160b023376f1166f01f25b50706dd272561a86593ff880ece4e04afdbd1f768a95fed0345c0d4e2ac046c38458166a298c21a484ac7a16
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb4e5x6c1QVb6nUm8ob:l8Vb618U68Vbb8Vb618ob
- TLSH T147769E17FA9444F5D17A99308AA69332EB72BC110B3197CF8364E6191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry