General
- Target 2026-07-11_4ce1ad6fa8e0d7d12fb56c8ae92f0053_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 7.3MB
- Sample260711-qrf26adt7z
- SHA256 6091d19e41b6de29ca384013fbc6987d86fbd339e391a4771353cb97a0376d02
- MD5 4ce1ad6fa8e0d7d12fb56c8ae92f0053
- SHA1 991f55a027e1d20f0248db93e5875adcf9989393
- SHA512 c6ffe65a15d67739eded4c913196beee275052a84cdce683ead6cf33958cde37375f7da577d482716578196da4e32fa4934d8382a42ef6175c1472f772f1106e
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1Ee5x6c1QVb6nUm8Ule5x6c1yD:l8Vb618U6D8Vb618U6OD
- TLSH T14B76AF17F69540F5D16A983046699336EB72BC120B31DBCB43A4F6192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_4ce1ad6fa8e0d7d12fb56c8ae92f0053_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_4ce1ad6fa8e0d7d12fb56c8ae92f0053_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_4ce1ad6fa8e0d7d12fb56c8ae92f0053_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 7.3MB
- SHA256 6091d19e41b6de29ca384013fbc6987d86fbd339e391a4771353cb97a0376d02
- MD5 4ce1ad6fa8e0d7d12fb56c8ae92f0053
- SHA1 991f55a027e1d20f0248db93e5875adcf9989393
- SHA512 c6ffe65a15d67739eded4c913196beee275052a84cdce683ead6cf33958cde37375f7da577d482716578196da4e32fa4934d8382a42ef6175c1472f772f1106e
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1Ee5x6c1QVb6nUm8Ule5x6c1yD:l8Vb618U6D8Vb618U6OD
- TLSH T14B76AF17F69540F5D16A983046699336EB72BC120B31DBCB43A4F6192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry