General
- Target 2026-07-06_cda1fc814acc2536e8d3c89dd655b673_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 16.6MB
- Sample260706-yph3qscy9y
- SHA256 b4da2b4e5c0c6488a46d61693677d28dfdedb976430cbbcb58e90adc18b83042
- MD5 cda1fc814acc2536e8d3c89dd655b673
- SHA1 d817594e2ad74840a5c4a654fbea0e65d6ec8094
- SHA512 8a98e3ed31bfd9b372f3540a927597b4dc13f3a676e4ebcebc354067cb6e50738252e0a02f8c5bb9624576da3c4626aa2a770eb449b9c8c1952cb8b1c269ed9d
- SSDEEP 196608:l8Vb618U68Vb618US18e8Vb618U68Vb618US18AvyEYc/b3w8O:2cDcyGcDcyDvyEYKbi
- TLSH T1AD078E16BBA440F5E06AD5748A668672EB727C520B31ABCF0390F61E2F336D05F39725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_cda1fc814acc2536e8d3c89dd655b673_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_cda1fc814acc2536e8d3c89dd655b673_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_cda1fc814acc2536e8d3c89dd655b673_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 16.6MB
- SHA256 b4da2b4e5c0c6488a46d61693677d28dfdedb976430cbbcb58e90adc18b83042
- MD5 cda1fc814acc2536e8d3c89dd655b673
- SHA1 d817594e2ad74840a5c4a654fbea0e65d6ec8094
- SHA512 8a98e3ed31bfd9b372f3540a927597b4dc13f3a676e4ebcebc354067cb6e50738252e0a02f8c5bb9624576da3c4626aa2a770eb449b9c8c1952cb8b1c269ed9d
- SSDEEP 196608:l8Vb618U68Vb618US18e8Vb618U68Vb618US18AvyEYc/b3w8O:2cDcyGcDcyDvyEYKbi
- TLSH T1AD078E16BBA440F5E06AD5748A668672EB727C520B31ABCF0390F61E2F336D05F39725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry