General
- Target 2026-07-12_599bf1877ea79f93a3bb38ff82f81cf9_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 11.6MB
- Sample260712-ld1gesfw2p
- SHA256 214e52d2a279f1866ab38802840253046c6b5e1541cbcec19c4c76fdd5c1d4f1
- MD5 599bf1877ea79f93a3bb38ff82f81cf9
- SHA1 aa448327196d3e81d76a084fb6468d244b7770eb
- SHA512 38249c350f0074a122ca8d8bd47501cc30499bd3b2daf23c92aa06f3b64ecbe831d5e9dc3e52f603dc3666457e91c490c5846fc9c6bafb27019ee54c0e7556e8
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1Ee5x6c1QVb6nUm8Ule5x6c1fQvGAdlCEL8c/bRNw9:l8Vb618U6D8Vb618U68vyEYc/b3w8W
- TLSH T1C0C68D16BBA480F5E16A9534897A8672F7727C120B31DBCB4350F61E2F336D05E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_599bf1877ea79f93a3bb38ff82f81cf9_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_599bf1877ea79f93a3bb38ff82f81cf9_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_599bf1877ea79f93a3bb38ff82f81cf9_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 11.6MB
- SHA256 214e52d2a279f1866ab38802840253046c6b5e1541cbcec19c4c76fdd5c1d4f1
- MD5 599bf1877ea79f93a3bb38ff82f81cf9
- SHA1 aa448327196d3e81d76a084fb6468d244b7770eb
- SHA512 38249c350f0074a122ca8d8bd47501cc30499bd3b2daf23c92aa06f3b64ecbe831d5e9dc3e52f603dc3666457e91c490c5846fc9c6bafb27019ee54c0e7556e8
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1Ee5x6c1QVb6nUm8Ule5x6c1fQvGAdlCEL8c/bRNw9:l8Vb618U6D8Vb618U68vyEYc/b3w8W
- TLSH T1C0C68D16BBA480F5E16A9534897A8672F7727C120B31DBCB4350F61E2F336D05E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry