General
- Target 2026-07-08_351fa3f2711adecbeb101650e52aca52_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_stealc_vidar
- Size 44.5MB
- Sample260708-sl87vsg18y
- SHA256 b6d6728777bdcbcf48f4746338d0da6680a0320a0065fc6ec4aeb2eac0ea9122
- MD5 351fa3f2711adecbeb101650e52aca52
- SHA1 821aabde5e3b89a47853481094cc7a44853848c3
- SHA512 3b0a31dae4c3afc24d30a8b230b2ace6187cbc35bf227cc43d1f34442de01fb615f7102f2475bb5585022a13553bdbbf18624affa7059a24b826dced6359b7f6
- SSDEEP 393216:IkLDkL2vyEYKbPkLDkL2vyEYKbaGNkLDkL2vyEYKbPkLDkL2vyEYKbaGR:IkLDkLiRkLDkLiLNkLDkLiRkLDkLiLR
- TLSH T14DA76C557BE440F9E1AA963499768672F676BC420B31DB8F0290F61E2F337D09D39322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_351fa3f2711adecbeb101650e52aca52_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_351fa3f2711adecbeb101650e52aca52_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_351fa3f2711adecbeb101650e52aca52_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_stealc_vidar
- Size 44.5MB
- SHA256 b6d6728777bdcbcf48f4746338d0da6680a0320a0065fc6ec4aeb2eac0ea9122
- MD5 351fa3f2711adecbeb101650e52aca52
- SHA1 821aabde5e3b89a47853481094cc7a44853848c3
- SHA512 3b0a31dae4c3afc24d30a8b230b2ace6187cbc35bf227cc43d1f34442de01fb615f7102f2475bb5585022a13553bdbbf18624affa7059a24b826dced6359b7f6
- SSDEEP 393216:IkLDkL2vyEYKbPkLDkL2vyEYKbaGNkLDkL2vyEYKbPkLDkL2vyEYKbaGR:IkLDkLiRkLDkLiLNkLDkLiRkLDkLiLR
- TLSH T14DA76C557BE440F9E1AA963499768672F676BC420B31DB8F0290F61E2F337D09D39322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry