General
- Target 2026-07-06_201c000cdd0123c300e69f3fba8cabc2_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 12.3MB
- Sample260706-2b258shy7j
- SHA256 cf5db4ecb620e5166c52e08fce863ee9c9fd687e82a9566e67532e3241839279
- MD5 201c000cdd0123c300e69f3fba8cabc2
- SHA1 f3f3f4657adee41a2e64b1549033506c6b7edd0e
- SHA512 4680e37e9400a71c821a868923e64f8169c368e9ffe773985e6c3499670ec52cd622b8269a6575b7add3a7d7f22b06433d47ee728fbd04e0333caa91e41f68e9
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8VbxvyEYc/b3w8O:2cDcy+bvyEYKbi
- TLSH T15FD67D16BBE840F5E16AD5348A668672FB727C520B319BCF0290F61E2F336D05E39725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_201c000cdd0123c300e69f3fba8cabc2_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_201c000cdd0123c300e69f3fba8cabc2_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_201c000cdd0123c300e69f3fba8cabc2_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 12.3MB
- SHA256 cf5db4ecb620e5166c52e08fce863ee9c9fd687e82a9566e67532e3241839279
- MD5 201c000cdd0123c300e69f3fba8cabc2
- SHA1 f3f3f4657adee41a2e64b1549033506c6b7edd0e
- SHA512 4680e37e9400a71c821a868923e64f8169c368e9ffe773985e6c3499670ec52cd622b8269a6575b7add3a7d7f22b06433d47ee728fbd04e0333caa91e41f68e9
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8VbxvyEYc/b3w8O:2cDcy+bvyEYKbi
- TLSH T15FD67D16BBE840F5E16AD5348A668672FB727C520B319BCF0290F61E2F336D05E39725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry