General
- Target 2026-07-10_8e55ff6c657ce51496d52a15b8727e49_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 5.1MB
- Sample260710-fwwnasdv2k
- SHA256 46b633d16cb22a3de3cd5cc0af91a924c8fa15b6db61bc6801c7ac87375a12d3
- MD5 8e55ff6c657ce51496d52a15b8727e49
- SHA1 67dcaf58131f90e686fd7fed973140a1e0b7a9ba
- SHA512 4f17f96d415d555b3770e7b8870067e0f266f3946ed8b418ecce3ba072157482aaa96a46946dda8bf2c46fb99c2a2c37402bd1df15071c1ef6f599db728c364a
- SSDEEP 98304:vjPxcO4KYoezSC6vZ/WQtZ/K0tGOFWVRuLftCTG:vjPxcO4a/WyZ/K0ttYVAATG
- TLSH T123365B13F2A901A9E06AD178CF629732DB327C5A87F1A5DF224076D41E77AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-10_8e55ff6c657ce51496d52a15b8727e49_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_8e55ff6c657ce51496d52a15b8727e49_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_8e55ff6c657ce51496d52a15b8727e49_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 5.1MB
- SHA256 46b633d16cb22a3de3cd5cc0af91a924c8fa15b6db61bc6801c7ac87375a12d3
- MD5 8e55ff6c657ce51496d52a15b8727e49
- SHA1 67dcaf58131f90e686fd7fed973140a1e0b7a9ba
- SHA512 4f17f96d415d555b3770e7b8870067e0f266f3946ed8b418ecce3ba072157482aaa96a46946dda8bf2c46fb99c2a2c37402bd1df15071c1ef6f599db728c364a
- SSDEEP 98304:vjPxcO4KYoezSC6vZ/WQtZ/K0tGOFWVRuLftCTG:vjPxcO4a/WyZ/K0ttYVAATG
- TLSH T123365B13F2A901A9E06AD178CF629732DB327C5A87F1A5DF224076D41E77AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory