General
- Target 2026-07-01_03c98dd87862d938cb3241db61bc8375_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 35.8MB
- Sample260701-mxtnnaet3v
- SHA256 a9456f3a60a2f7c16e90828d5b95dc34479d632deee62f217a209e7e82f67b2b
- MD5 03c98dd87862d938cb3241db61bc8375
- SHA1 77a04783dba843e68c3b8102e916c3af2f460a57
- SHA512 1382cb98b441282b2c130046763f2b8412b27c2c9812bea617e170d72cb2ee2565a9c14d4414aa2f56bb8eb936669a13aa5b22baad9e44f475da38aa018d71e2
- SSDEEP 393216:2cDc9cDc5K9o7GgGtcDc9cDc5K9o7GgGJKD:tA2AE6qPGA2AE6qPUD
- TLSH T15A877C17B6E440E4D0AAC5748B968632E7B27C154F30A7DF4264B61D2F33AD06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_03c98dd87862d938cb3241db61bc8375_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_03c98dd87862d938cb3241db61bc8375_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_03c98dd87862d938cb3241db61bc8375_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 35.8MB
- SHA256 a9456f3a60a2f7c16e90828d5b95dc34479d632deee62f217a209e7e82f67b2b
- MD5 03c98dd87862d938cb3241db61bc8375
- SHA1 77a04783dba843e68c3b8102e916c3af2f460a57
- SHA512 1382cb98b441282b2c130046763f2b8412b27c2c9812bea617e170d72cb2ee2565a9c14d4414aa2f56bb8eb936669a13aa5b22baad9e44f475da38aa018d71e2
- SSDEEP 393216:2cDc9cDc5K9o7GgGtcDc9cDc5K9o7GgGJKD:tA2AE6qPGA2AE6qPUD
- TLSH T15A877C17B6E440E4D0AAC5748B968632E7B27C154F30A7DF4264B61D2F33AD06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application