General
- Target 2026-07-06_4a41e4203a1b8737f0683a2bafbc08bc_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 2.2MB
- Sample260706-1mb8hsbz7w
- SHA256 551f9a69b0bf8068f755a358b5dc659474ceeb8b2c58bdf1aac598496fe64538
- MD5 4a41e4203a1b8737f0683a2bafbc08bc
- SHA1 5b72cc97a7af453cf843d1ce1d99199b7de138e5
- SHA512 3bc1d4073c4599ab231f2a646c5c0c1f580b368041048223c0dc460045a2d85e1c79c46489be316b395dae3c4861ced3063afb35ce4318393ef980af6f304bfb
- SSDEEP 24576:U7unO5AlwaPVPSmyBLsUr01EINbltv03FVSJLYsCuz9Acx97z7fIoggWvp:U7unOyTPVqBdoZbb03FVS+W7z7RgB
- TLSH T1B3A5BE03F69940E8D02DD678CB568A31EA72BC414F34A6DF0390B65A2E77AD45F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_4a41e4203a1b8737f0683a2bafbc08bc_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_4a41e4203a1b8737f0683a2bafbc08bc_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 2.2MB
- SHA256 551f9a69b0bf8068f755a358b5dc659474ceeb8b2c58bdf1aac598496fe64538
- MD5 4a41e4203a1b8737f0683a2bafbc08bc
- SHA1 5b72cc97a7af453cf843d1ce1d99199b7de138e5
- SHA512 3bc1d4073c4599ab231f2a646c5c0c1f580b368041048223c0dc460045a2d85e1c79c46489be316b395dae3c4861ced3063afb35ce4318393ef980af6f304bfb
- SSDEEP 24576:U7unO5AlwaPVPSmyBLsUr01EINbltv03FVSJLYsCuz9Acx97z7fIoggWvp:U7unOyTPVqBdoZbb03FVS+W7z7RgB
- TLSH T1B3A5BE03F69940E8D02DD678CB568A31EA72BC414F34A6DF0390B65A2E77AD45F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.