General
- Target 2026-07-12_4870f0c7a64bbadb5de2fc366ae49cd3_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- Sample260712-qpmrxscx2z
- SHA256 98d991c977cb1edb979e54e14ae76b651d84756e6d369a0b34d57e55ef48c4f6
- MD5 4870f0c7a64bbadb5de2fc366ae49cd3
- SHA1 9d7c4a2b84c4dfe8ae2cb015ab8476c2c844787f
- SHA512 e272710669f5b1e47551d483cfb2ccd517909e058b0004401bfcc7f57195c18c158180a61b99f93b3b4c5e3bb2b6645ec67091f0c788a9d6136f41d16e5c7e6c
- SSDEEP 98304:U0nAAYEpUhLQA91pH2WpjHrgBFFu416AWvF:hNqQmHpn6F44IAWvF
- TLSH T1A1766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA562F736286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_4870f0c7a64bbadb5de2fc366ae49cd3_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_4870f0c7a64bbadb5de2fc366ae49cd3_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- SHA256 98d991c977cb1edb979e54e14ae76b651d84756e6d369a0b34d57e55ef48c4f6
- MD5 4870f0c7a64bbadb5de2fc366ae49cd3
- SHA1 9d7c4a2b84c4dfe8ae2cb015ab8476c2c844787f
- SHA512 e272710669f5b1e47551d483cfb2ccd517909e058b0004401bfcc7f57195c18c158180a61b99f93b3b4c5e3bb2b6645ec67091f0c788a9d6136f41d16e5c7e6c
- SSDEEP 98304:U0nAAYEpUhLQA91pH2WpjHrgBFFu416AWvF:hNqQmHpn6F44IAWvF
- TLSH T1A1766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA562F736286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE