General
- Target 2026-07-09_e13f158aa2c2e11e1049fd1a21de30e0_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- Sample260710-abs4sab19t
- SHA256 ed94e45fd401e9f342f4049bc575103bcd00f8a1c85ca7154d4f4ad8c44d0616
- MD5 e13f158aa2c2e11e1049fd1a21de30e0
- SHA1 a32a8c38341eb2dd7074c7264351c8b6de980bd0
- SHA512 965f1ed1c53326f46ed096d261c1103d371a0f49baa0f27aa380ad24a943d4d2fbaabee3b48ffc27e26fedbdc91347796532652e942a2a39a929ba9e9cf99c1c
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFou1:0NA1Yakeer5+nsom
- TLSH T1FD05A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_e13f158aa2c2e11e1049fd1a21de30e0_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_e13f158aa2c2e11e1049fd1a21de30e0_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_e13f158aa2c2e11e1049fd1a21de30e0_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- SHA256 ed94e45fd401e9f342f4049bc575103bcd00f8a1c85ca7154d4f4ad8c44d0616
- MD5 e13f158aa2c2e11e1049fd1a21de30e0
- SHA1 a32a8c38341eb2dd7074c7264351c8b6de980bd0
- SHA512 965f1ed1c53326f46ed096d261c1103d371a0f49baa0f27aa380ad24a943d4d2fbaabee3b48ffc27e26fedbdc91347796532652e942a2a39a929ba9e9cf99c1c
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFou1:0NA1Yakeer5+nsom
- TLSH T1FD05A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Contacts a large (2210) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Adds Run key to start application