General
- Target 2026-07-09_447b101c1ac38e918a2ab1d5ee214786_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- Sample260709-fwkk2acy4n
- SHA256 ad72fe96368eb4d18704734a0905dc24d41952f4912017a763e07c0b084ffbe5
- MD5 447b101c1ac38e918a2ab1d5ee214786
- SHA1 108bf0acc5229d9fef51fb8b2d6691b0bc9c93cc
- SHA512 772c6656ecdcfaf4666d1036392d316c9b3b520349cc61c05a1247650b796541bb2a374bdf324c465692f83b1127215ba2fc2ba400581e970942aaf9d413c41d
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFouy:0NA1Yakeer5+nsoJ
- TLSH T15005A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_447b101c1ac38e918a2ab1d5ee214786_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_447b101c1ac38e918a2ab1d5ee214786_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_447b101c1ac38e918a2ab1d5ee214786_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- SHA256 ad72fe96368eb4d18704734a0905dc24d41952f4912017a763e07c0b084ffbe5
- MD5 447b101c1ac38e918a2ab1d5ee214786
- SHA1 108bf0acc5229d9fef51fb8b2d6691b0bc9c93cc
- SHA512 772c6656ecdcfaf4666d1036392d316c9b3b520349cc61c05a1247650b796541bb2a374bdf324c465692f83b1127215ba2fc2ba400581e970942aaf9d413c41d
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFouy:0NA1Yakeer5+nsoJ
- TLSH T15005A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Contacts a large (1380) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Adds Run key to start application