General
- Target 2026-07-01_abd800bbb56161589c4628d50b2152a2_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_stealc_vidar
- Size 7.5MB
- Sample260701-qectzaez2m
- SHA256 0807ca418f1fe615cbb8ccff632d437f95bda026553d3e75c1b371923d556a22
- MD5 abd800bbb56161589c4628d50b2152a2
- SHA1 16af5f0198c1bf58248dab1b484cf3b2b9411ede
- SHA512 4864b8b984520963ec64d8e0e0383d5c19682657981d3e7f0467b2ea382449687e998ead963c2c8ffbe10475487c8bb7c7c223271b80cb069c26f7a5f5150af8
- SSDEEP 98304:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1TQvGAdlCEL8c/bRNw5CO:nPdPYvyEYc/b3w8O
- TLSH T134867D12BBE580F5D6669534897A9772F776B8020F31DB8B4350CA1E2F336905D3A33A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_abd800bbb56161589c4628d50b2152a2_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_abd800bbb56161589c4628d50b2152a2_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_abd800bbb56161589c4628d50b2152a2_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_stealc_vidar
- Size 7.5MB
- SHA256 0807ca418f1fe615cbb8ccff632d437f95bda026553d3e75c1b371923d556a22
- MD5 abd800bbb56161589c4628d50b2152a2
- SHA1 16af5f0198c1bf58248dab1b484cf3b2b9411ede
- SHA512 4864b8b984520963ec64d8e0e0383d5c19682657981d3e7f0467b2ea382449687e998ead963c2c8ffbe10475487c8bb7c7c223271b80cb069c26f7a5f5150af8
- SSDEEP 98304:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1TQvGAdlCEL8c/bRNw5CO:nPdPYvyEYc/b3w8O
- TLSH T134867D12BBE580F5D6669534897A9772F776B8020F31DB8B4350CA1E2F336905D3A33A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry