General
- Target 2026-06-30_91b0da39af6772814c9445460ebadd75_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 18.1MB
- Sample260701-edd5vsfx31
- SHA256 3045e950081f8bb9472004a0922f175478d01fce494ba1c1f68da0cd02ada071
- MD5 91b0da39af6772814c9445460ebadd75
- SHA1 8e322f229c9d2b96035afa3ff5045d77bcddbf3d
- SHA512 71075e5d38f952233284e90df3725dcd75269de8ff5ba55a0b70fad675043b6e5d11aa45c2645c7107f6c8c558e22caf33b032f89c7fe9f50bd427f13806446f
- SSDEEP 196608:l8Vb618U68Vbb8Vb61898Vb618U68Vbb8Vb618evyEYc/b3w8O:2cD2clcD2cfvyEYKbi
- TLSH T105178D17BBA440F5E17A95348A668632EB72BC120B31D7CF4354E61E2F336D05E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_91b0da39af6772814c9445460ebadd75_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_91b0da39af6772814c9445460ebadd75_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_91b0da39af6772814c9445460ebadd75_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 18.1MB
- SHA256 3045e950081f8bb9472004a0922f175478d01fce494ba1c1f68da0cd02ada071
- MD5 91b0da39af6772814c9445460ebadd75
- SHA1 8e322f229c9d2b96035afa3ff5045d77bcddbf3d
- SHA512 71075e5d38f952233284e90df3725dcd75269de8ff5ba55a0b70fad675043b6e5d11aa45c2645c7107f6c8c558e22caf33b032f89c7fe9f50bd427f13806446f
- SSDEEP 196608:l8Vb618U68Vbb8Vb61898Vb618U68Vbb8Vb618evyEYc/b3w8O:2cD2clcD2cfvyEYKbi
- TLSH T105178D17BBA440F5E17A95348A668632EB72BC120B31D7CF4354E61E2F336D05E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry