General
- Target 2026-07-06_36edd7916102c5638c4ca1d8fb889b53_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 13.1MB
- Sample260707-e1646ahx6x
- SHA256 66cddffbd98ab6ef46e4d98b4a71608203bdd16d01e916f2f3d8a1f9b9c61e99
- MD5 36edd7916102c5638c4ca1d8fb889b53
- SHA1 9e8b5cc9ce32f55a1e5ade4eb9c2364d97b9a052
- SHA512 bc1831c88df04df8b2e83e0658b78e851f9b1b858de6bdbecd64a9d3087bbed329c367a76db286c25d30e5bafa913dd704cfb2e6f7d73d0d17768655862296a7
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoO0oAaldmdmnpZu5x6M1WoDDklJ6qCu5x6M1WoOF:Qi8kLrieKmd0Yi8kLrieKmd0f
- TLSH T168D68D03B69544A9D16AC534CE569631DB72BC4907F196EF3290FADA2E33BC07B39312
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_36edd7916102c5638c4ca1d8fb889b53_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_36edd7916102c5638c4ca1d8fb889b53_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_36edd7916102c5638c4ca1d8fb889b53_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 13.1MB
- SHA256 66cddffbd98ab6ef46e4d98b4a71608203bdd16d01e916f2f3d8a1f9b9c61e99
- MD5 36edd7916102c5638c4ca1d8fb889b53
- SHA1 9e8b5cc9ce32f55a1e5ade4eb9c2364d97b9a052
- SHA512 bc1831c88df04df8b2e83e0658b78e851f9b1b858de6bdbecd64a9d3087bbed329c367a76db286c25d30e5bafa913dd704cfb2e6f7d73d0d17768655862296a7
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoO0oAaldmdmnpZu5x6M1WoDDklJ6qCu5x6M1WoOF:Qi8kLrieKmd0Yi8kLrieKmd0f
- TLSH T168D68D03B69544A9D16AC534CE569631DB72BC4907F196EF3290FADA2E33BC07B39312
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry