General
- Target 2026-07-03_e7c9736f0b9b30c0388ade32e5cd3d85_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 15.5MB
- Sample260703-q2k4vsfs3q
- SHA256 1d9c88a3136a52a8ed923358b13365fa8531650dfa7930608ef2baa9a6a4cf51
- MD5 e7c9736f0b9b30c0388ade32e5cd3d85
- SHA1 b42be3456a4509c405f51cde8432ad51141a1d12
- SHA512 b4a04b091c91e84164d8ce1672f0636f38f51aa88252d0a38c6078eeb54fdcb0e5f09de6272e26851d6d1b8a154d4129c7b35825d3e5133e2cee04930a99d656
- SSDEEP 196608:l8Vb618U68Vb618UbKzQcIh8Vb618U68Vb618UbKzQcI8:2cDc3KRPcDc3KRx
- TLSH T1BCF67B23B6E500E9D16A9430CF568231E7B27C664BB197DB5250F2192F33AD07F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_e7c9736f0b9b30c0388ade32e5cd3d85_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_e7c9736f0b9b30c0388ade32e5cd3d85_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_e7c9736f0b9b30c0388ade32e5cd3d85_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 15.5MB
- SHA256 1d9c88a3136a52a8ed923358b13365fa8531650dfa7930608ef2baa9a6a4cf51
- MD5 e7c9736f0b9b30c0388ade32e5cd3d85
- SHA1 b42be3456a4509c405f51cde8432ad51141a1d12
- SHA512 b4a04b091c91e84164d8ce1672f0636f38f51aa88252d0a38c6078eeb54fdcb0e5f09de6272e26851d6d1b8a154d4129c7b35825d3e5133e2cee04930a99d656
- SSDEEP 196608:l8Vb618U68Vb618UbKzQcIh8Vb618U68Vb618UbKzQcI8:2cDc3KRPcDc3KRx
- TLSH T1BCF67B23B6E500E9D16A9430CF568231E7B27C664BB197DB5250F2192F33AD07F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry