General
- Target 2026-07-10_b94dcd45668f4e3d60179b7daacc9ae5_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 51.7MB
- Sample260710-ybcc2afy8p
- SHA256 2baac31becc7486ea7f4eba7d781f91f25a48656579d90bc2d27ab9ce9fe7ba9
- MD5 b94dcd45668f4e3d60179b7daacc9ae5
- SHA1 117222354694ea364712b9018dcb4a426325d383
- SHA512 b7b92f34574a08ef25ca0300457442399329ec8ac5c69e2098f36270f90e3ee422f2402b29297a39c6dfcbdfb4d422e6d352f77bb9c6e1e6c9e4f7efcce58e30
- SSDEEP 393216:2cD2clcD2cCUEtQevvqc2W1cpucD2clcD2cCUEtQevvqc2W1cpevyEYKbi:tZeZdE8c23plZeZdE8c23p6A
- TLSH T1F7C78C56ABA400F5D17AD478C6668633FBB27C010B34A7DB42A5D71A2F336E05E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_b94dcd45668f4e3d60179b7daacc9ae5_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_b94dcd45668f4e3d60179b7daacc9ae5_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_b94dcd45668f4e3d60179b7daacc9ae5_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 51.7MB
- SHA256 2baac31becc7486ea7f4eba7d781f91f25a48656579d90bc2d27ab9ce9fe7ba9
- MD5 b94dcd45668f4e3d60179b7daacc9ae5
- SHA1 117222354694ea364712b9018dcb4a426325d383
- SHA512 b7b92f34574a08ef25ca0300457442399329ec8ac5c69e2098f36270f90e3ee422f2402b29297a39c6dfcbdfb4d422e6d352f77bb9c6e1e6c9e4f7efcce58e30
- SSDEEP 393216:2cD2clcD2cCUEtQevvqc2W1cpucD2clcD2cCUEtQevvqc2W1cpevyEYKbi:tZeZdE8c23plZeZdE8c23p6A
- TLSH T1F7C78C56ABA400F5D17AD478C6668633FBB27C010B34A7DB42A5D71A2F336E05E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry