General
- Target 2026-07-12_624dc2f87588d07ec3d5d9377e1c5de3_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- Sample260712-p88ytscs7x
- SHA256 9ab50bfd57344ea35ff6019cd7a6aa26d978c14e56742815ce932b46f9e199a2
- MD5 624dc2f87588d07ec3d5d9377e1c5de3
- SHA1 268c98c413ac72f24bfd291ec54e8858afbef060
- SHA512 0651a616c40a6574ca72f3987cc613afadf5704872d65453a47fa716d84760ad8439d3baaa4bf54872d55ac4dc63fe92488df6c97eb566b0f9af2ad6b94d3388
- SSDEEP 98304:v0nAAYEpxhSQA91pH2WpjHrgBFFu416AWvi:MNAQmHpn6F44IAWvi
- TLSH T126765BA5A2A761FDE0AFD075892AC732E6717C130031970F26BCEA563F736146D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_624dc2f87588d07ec3d5d9377e1c5de3_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_624dc2f87588d07ec3d5d9377e1c5de3_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- SHA256 9ab50bfd57344ea35ff6019cd7a6aa26d978c14e56742815ce932b46f9e199a2
- MD5 624dc2f87588d07ec3d5d9377e1c5de3
- SHA1 268c98c413ac72f24bfd291ec54e8858afbef060
- SHA512 0651a616c40a6574ca72f3987cc613afadf5704872d65453a47fa716d84760ad8439d3baaa4bf54872d55ac4dc63fe92488df6c97eb566b0f9af2ad6b94d3388
- SSDEEP 98304:v0nAAYEpxhSQA91pH2WpjHrgBFFu416AWvi:MNAQmHpn6F44IAWvi
- TLSH T126765BA5A2A761FDE0AFD075892AC732E6717C130031970F26BCEA563F736146D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE