General
- Target 2026-06-30_0859226afb9092afb04100432a9e8f63_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 3.6MB
- Sample260701-bb6wbadv9z
- SHA256 d7338be414061b831f407518ffbb4df3de4dc6ebf223e31785e2bf7c1cde61ce
- MD5 0859226afb9092afb04100432a9e8f63
- SHA1 8a723285d7d411de912b3986d457583c35a7d0b3
- SHA512 58c43e016773f594ff57327edc1f1b343810f02eaa13feadb9691a4b2d33cbfa7aba80238b538c2ffd3be6fa7ed1b0b655a436329ecbd22348d2d1697f524cb3
- SSDEEP 49152:jYRw5x6M1vYRw5x6M1yJIUyYRw5x6M1vYRw5x6M1yJIUl:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1g
- TLSH T1FA067D12F59180F2C76D1930866AA775BB37AA110B55CBC3D3A4DA3D2F331C0AD7626B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_0859226afb9092afb04100432a9e8f63_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_0859226afb9092afb04100432a9e8f63_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_0859226afb9092afb04100432a9e8f63_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 3.6MB
- SHA256 d7338be414061b831f407518ffbb4df3de4dc6ebf223e31785e2bf7c1cde61ce
- MD5 0859226afb9092afb04100432a9e8f63
- SHA1 8a723285d7d411de912b3986d457583c35a7d0b3
- SHA512 58c43e016773f594ff57327edc1f1b343810f02eaa13feadb9691a4b2d33cbfa7aba80238b538c2ffd3be6fa7ed1b0b655a436329ecbd22348d2d1697f524cb3
- SSDEEP 49152:jYRw5x6M1vYRw5x6M1yJIUyYRw5x6M1vYRw5x6M1yJIUl:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1g
- TLSH T1FA067D12F59180F2C76D1930866AA775BB37AA110B55CBC3D3A4DA3D2F331C0AD7626B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry