General
- Target 2026-07-01_039d0c75051a3900b786ee4d9edd1d44_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 33.7MB
- Sample260702-ay9eaagz4k
- SHA256 d8fce88ffe051ade74930b612c3021f3912082372f41f86abaf19c43c2ea1135
- MD5 039d0c75051a3900b786ee4d9edd1d44
- SHA1 22c1f3cb7ba49f4d5c9b37c6fe312370dd04292e
- SHA512 23548ef55c0d733250bc3151cba3fbd0accfab663f41e82693b84d9f00d6d945210b72b8c75d32890ee91255492eafeaa6fe4c64550a1ab30f515e4234268411
- SSDEEP 393216:2c7checc7chedc7checc7cheJWqQjpUK:tYkXYkWYkXYk8fjp3
- TLSH T1CE779D13F2E540E8D06AD57487569232EAB2BC554B31A7CF0390F6692F33AD06F39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_039d0c75051a3900b786ee4d9edd1d44_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_039d0c75051a3900b786ee4d9edd1d44_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_039d0c75051a3900b786ee4d9edd1d44_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 33.7MB
- SHA256 d8fce88ffe051ade74930b612c3021f3912082372f41f86abaf19c43c2ea1135
- MD5 039d0c75051a3900b786ee4d9edd1d44
- SHA1 22c1f3cb7ba49f4d5c9b37c6fe312370dd04292e
- SHA512 23548ef55c0d733250bc3151cba3fbd0accfab663f41e82693b84d9f00d6d945210b72b8c75d32890ee91255492eafeaa6fe4c64550a1ab30f515e4234268411
- SSDEEP 393216:2c7checc7chedc7checc7cheJWqQjpUK:tYkXYkWYkXYk8fjp3
- TLSH T1CE779D13F2E540E8D06AD57487569232EAB2BC554B31A7CF0390F6692F33AD06F39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry