General
- Target 2026-07-09_5f88508aebd44182aa024bdbf19ecff6_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 29.0MB
- Sample260709-x4mtsshv8x
- SHA256 4d8e8f92e652a1a740911ac22a086c5458d25023859b4d553e6840e615d23f6e
- MD5 5f88508aebd44182aa024bdbf19ecff6
- SHA1 96b320ade45ccc37afe8e3a8a4ca1986be7f6255
- SHA512 91b205ae9df7284d269550cb6293eb726584b36656e79a4cdd8e268d7593e6b81f0608aa23cf3ac93af8f27a36cab344e879295da76961ceea6126b3a6a10da6
- SSDEEP 196608:l8Vb618U68Vbb8Vb618N8Vb618U68Vbb8Vb618G8Vb618U68Vbb8Vb618N8Vb61i:2cD2cpcD2c4cD2cpcD2cko
- TLSH T1DF678D17F69444F5D17A99308AA69232EB72BC120B3197CF43A4F6191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_5f88508aebd44182aa024bdbf19ecff6_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_5f88508aebd44182aa024bdbf19ecff6_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_5f88508aebd44182aa024bdbf19ecff6_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 29.0MB
- SHA256 4d8e8f92e652a1a740911ac22a086c5458d25023859b4d553e6840e615d23f6e
- MD5 5f88508aebd44182aa024bdbf19ecff6
- SHA1 96b320ade45ccc37afe8e3a8a4ca1986be7f6255
- SHA512 91b205ae9df7284d269550cb6293eb726584b36656e79a4cdd8e268d7593e6b81f0608aa23cf3ac93af8f27a36cab344e879295da76961ceea6126b3a6a10da6
- SSDEEP 196608:l8Vb618U68Vbb8Vb618N8Vb618U68Vbb8Vb618G8Vb618U68Vbb8Vb618N8Vb61i:2cD2cpcD2c4cD2cpcD2cko
- TLSH T1DF678D17F69444F5D17A99308AA69232EB72BC120B3197CF43A4F6191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry