General
- Target 2026-07-09_c240ae1ab14a311501896e26b300bfe9_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 8.8MB
- Sample260709-pdtweshy4p
- SHA256 91544bd3651d74099a6be0e9dad7dff273ab7fd1a67792d76cffba44872c2919
- MD5 c240ae1ab14a311501896e26b300bfe9
- SHA1 4dddca936b6d8229ebb88c2c8404ae4b97135934
- SHA512 c2bf8461b0aeeff9863dc7c6fd713418932b55a81993cb0650244c86f88993b8761146a860ae7b171a483802bb46745cfe7b25c74ad9ef748536877f13c933c5
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1Ee5x6c1QVb6nUm8Ule5x6c1aGgHIKgM:l8Vb618U6D8Vb618U6woK
- TLSH T1EF969E17F69540F5D16A9530465A9332EA72BC120B31ABCF43A4F7192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_c240ae1ab14a311501896e26b300bfe9_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_c240ae1ab14a311501896e26b300bfe9_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_c240ae1ab14a311501896e26b300bfe9_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 8.8MB
- SHA256 91544bd3651d74099a6be0e9dad7dff273ab7fd1a67792d76cffba44872c2919
- MD5 c240ae1ab14a311501896e26b300bfe9
- SHA1 4dddca936b6d8229ebb88c2c8404ae4b97135934
- SHA512 c2bf8461b0aeeff9863dc7c6fd713418932b55a81993cb0650244c86f88993b8761146a860ae7b171a483802bb46745cfe7b25c74ad9ef748536877f13c933c5
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1Ee5x6c1QVb6nUm8Ule5x6c1aGgHIKgM:l8Vb618U6D8Vb618U6woK
- TLSH T1EF969E17F69540F5D16A9530465A9332EA72BC120B31ABCF43A4F7192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry