General
- Target 2026-07-12_4d0d43abe839f32504fab1de7aa1ee6b_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- Sample260712-qljk4aaw4j
- SHA256 a18415367bfff2c7e42f3bf4a5b3b4c0852411cea986a83f13a80181753e8c1d
- MD5 4d0d43abe839f32504fab1de7aa1ee6b
- SHA1 b5a817118feae6c25d40a7b4f87749e8c75f61c5
- SHA512 4bec389104f0c4731efd39ce582e57ab3a1fc3e9b17a4732cc1ebd1b5a598ac604d3d06ced9245f51a5d824ab47c46adaf2949e822f126e0954f8f66762d7645
- SSDEEP 98304:r0nAAYEp/hmQA91pH2WpjHrgBFFu416AWvm:4NeQmHpn6F44IAWvm
- TLSH T1F6766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_4d0d43abe839f32504fab1de7aa1ee6b_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_4d0d43abe839f32504fab1de7aa1ee6b_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- SHA256 a18415367bfff2c7e42f3bf4a5b3b4c0852411cea986a83f13a80181753e8c1d
- MD5 4d0d43abe839f32504fab1de7aa1ee6b
- SHA1 b5a817118feae6c25d40a7b4f87749e8c75f61c5
- SHA512 4bec389104f0c4731efd39ce582e57ab3a1fc3e9b17a4732cc1ebd1b5a598ac604d3d06ced9245f51a5d824ab47c46adaf2949e822f126e0954f8f66762d7645
- SSDEEP 98304:r0nAAYEp/hmQA91pH2WpjHrgBFFu416AWvm:4NeQmHpn6F44IAWvm
- TLSH T1F6766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.