General
- Target 2026-07-08_f8dd74f2e21fcea8b0613e6fcc402637_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 46.0MB
- Sample260708-twamqadv9t
- SHA256 ebc860dcf27c1c388d2f5c87c963395623d82fb07a9610fd82c07f6bc535debe
- MD5 f8dd74f2e21fcea8b0613e6fcc402637
- SHA1 7f7895662f5f5513f3feb552549aa77774ac14fa
- SHA512 b49762f82d3ac123476625213292a49099cdb5f4ef50d5362ec0927245502f8bedae298348a17136926bd2bf5a1e90e8a75a32470c4ed57b23b916d9459bf623
- SSDEEP 393216:IkLDkL2vyEYKbPkLDkL2vyEYKbaGNkLDkL2vyEYKbPkLDkL2vyEYKbaGro:IkLDkLiRkLDkLiLNkLDkLiRkLDkLiLE
- TLSH T1D9B76C567BE440F9E1AA963499768672E676BC420B31DBCF0290F61E2F337D05D39322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_f8dd74f2e21fcea8b0613e6fcc402637_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_f8dd74f2e21fcea8b0613e6fcc402637_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_f8dd74f2e21fcea8b0613e6fcc402637_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 46.0MB
- SHA256 ebc860dcf27c1c388d2f5c87c963395623d82fb07a9610fd82c07f6bc535debe
- MD5 f8dd74f2e21fcea8b0613e6fcc402637
- SHA1 7f7895662f5f5513f3feb552549aa77774ac14fa
- SHA512 b49762f82d3ac123476625213292a49099cdb5f4ef50d5362ec0927245502f8bedae298348a17136926bd2bf5a1e90e8a75a32470c4ed57b23b916d9459bf623
- SSDEEP 393216:IkLDkL2vyEYKbPkLDkL2vyEYKbaGNkLDkL2vyEYKbPkLDkL2vyEYKbaGro:IkLDkLiRkLDkLiLNkLDkLiRkLDkLiLE
- TLSH T1D9B76C567BE440F9E1AA963499768672E676BC420B31DBCF0290F61E2F337D05D39322
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry