General
- Target 2026-07-06_bb01419bcc6ffcee8e190eb6396c89e8_cobalt-strike_conti_elex_glassworm_swisyn
- Size 849KB
- Sample260706-wbrfvaav7x
- SHA256 5c453ebca28251bdfcfb6febf74be93b0bab421e95c497888435cd7d39460397
- MD5 bb01419bcc6ffcee8e190eb6396c89e8
- SHA1 6902b023002417bb40da9294233a624270da8ce9
- SHA512 c443eba5f723a84c4a3315a1eba3d17b91211bb7281c1c3307fd3fcb7b1a11d261bdb72056084262b088b1a5793954336893b29b6eeb61415f6f60435b8e2ddf
- SSDEEP 12288:PFUNDa+2DRDSkO6zttNtPhwk3Tj77HD0fb8UABnmPyIDpCRxfpT2:PFOaD9DSkht5kq5RxfpT2
- TLSH T1D2054A47F7C0BDEBC60143714CAA43583739FAB52747AF572A24A2302D277D6BE9160A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_bb01419bcc6ffcee8e190eb6396c89e8_cobalt-strike_conti_elex_glassworm_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_bb01419bcc6ffcee8e190eb6396c89e8_cobalt-strike_conti_elex_glassworm_swisyn.exe
Resource
win11ltsc2024-20260630-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_bb01419bcc6ffcee8e190eb6396c89e8_cobalt-strike_conti_elex_glassworm_swisyn
- Size 849KB
- SHA256 5c453ebca28251bdfcfb6febf74be93b0bab421e95c497888435cd7d39460397
- MD5 bb01419bcc6ffcee8e190eb6396c89e8
- SHA1 6902b023002417bb40da9294233a624270da8ce9
- SHA512 c443eba5f723a84c4a3315a1eba3d17b91211bb7281c1c3307fd3fcb7b1a11d261bdb72056084262b088b1a5793954336893b29b6eeb61415f6f60435b8e2ddf
- SSDEEP 12288:PFUNDa+2DRDSkO6zttNtPhwk3Tj77HD0fb8UABnmPyIDpCRxfpT2:PFOaD9DSkht5kq5RxfpT2
- TLSH T1D2054A47F7C0BDEBC60143714CAA43583739FAB52747AF572A24A2302D277D6BE9160A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory