General
- Target 2026-07-12_f1e93657c9ff0e0dedd1cfcc2dcf5016_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 22.8MB
- Sample260712-mydntsat2z
- SHA256 72f14daa9fff81093fe90555f4b7db69e1ac63a9c4d5dc05004178a112334550
- MD5 f1e93657c9ff0e0dedd1cfcc2dcf5016
- SHA1 00017be248c8c236559dd4db53ce48da7ef927d3
- SHA512 057770f57da23286a73a94d12ae5e76d0ec8e25bf092f994cd7ce93eecb031a6dee44a89dd0874bf6d4e732c26325fe8be1cad721179b3323ad04437caa24190
- SSDEEP 196608:l8Vb618U6D8Vb618U68vyEYc/b3w868Vb618U6D8Vb618U68vyEYc/b3w8TD:2cpc7vyEYKb7cpc7vyEYKbfD
- TLSH T1BF378D16BBA440F5E16A9534897A8672F772BC120B31DBCB4350F61E2F336D05E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_f1e93657c9ff0e0dedd1cfcc2dcf5016_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_f1e93657c9ff0e0dedd1cfcc2dcf5016_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_f1e93657c9ff0e0dedd1cfcc2dcf5016_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 22.8MB
- SHA256 72f14daa9fff81093fe90555f4b7db69e1ac63a9c4d5dc05004178a112334550
- MD5 f1e93657c9ff0e0dedd1cfcc2dcf5016
- SHA1 00017be248c8c236559dd4db53ce48da7ef927d3
- SHA512 057770f57da23286a73a94d12ae5e76d0ec8e25bf092f994cd7ce93eecb031a6dee44a89dd0874bf6d4e732c26325fe8be1cad721179b3323ad04437caa24190
- SSDEEP 196608:l8Vb618U6D8Vb618U68vyEYc/b3w868Vb618U6D8Vb618U68vyEYc/b3w8TD:2cpc7vyEYKb7cpc7vyEYKbfD
- TLSH T1BF378D16BBA440F5E16A9534897A8672F772BC120B31DBCB4350F61E2F336D05E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application