General
- Target 2026-07-01_94a530083d0e8ae213450df13ecb966b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_remcos_vidar
- Size 13.0MB
- Sample260701-sg43cagy2k
- SHA256 515b885419b5f231ec2431db01d369697f61ef3396c160e5bf878dbd24800695
- MD5 94a530083d0e8ae213450df13ecb966b
- SHA1 192f366704647c940db5a9dcb076ff217d699c98
- SHA512 309ffb7ffbb9cea74bb071e2924a084a1f94f3c979e2556e17eeaabd40055c494ee8b5d415f227d4327e6f0a658bdc0b22c5ccf63f48b7cf12a4beed725a41ce
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qlTu5x6M1WoDDklJ6qCu5x6M1WoDDklJG:Qi8kLri8kL7ci8kLri8kL7NQ
- TLSH T1A4D68E02B6E4457AE17F4A3496769632AA77BC420B11D7CF56D0F62E2E327C09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_94a530083d0e8ae213450df13ecb966b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_94a530083d0e8ae213450df13ecb966b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_94a530083d0e8ae213450df13ecb966b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_remcos_vidar
- Size 13.0MB
- SHA256 515b885419b5f231ec2431db01d369697f61ef3396c160e5bf878dbd24800695
- MD5 94a530083d0e8ae213450df13ecb966b
- SHA1 192f366704647c940db5a9dcb076ff217d699c98
- SHA512 309ffb7ffbb9cea74bb071e2924a084a1f94f3c979e2556e17eeaabd40055c494ee8b5d415f227d4327e6f0a658bdc0b22c5ccf63f48b7cf12a4beed725a41ce
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qlTu5x6M1WoDDklJ6qCu5x6M1WoDDklJG:Qi8kLri8kL7ci8kLri8kL7NQ
- TLSH T1A4D68E02B6E4457AE17F4A3496769632AA77BC420B11D7CF56D0F62E2E327C09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry