General
- Target 2026-07-12_16a660e50086e47a2202097a8d3e58d5_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 19.8MB
- Sample260712-rjc6zabt5n
- SHA256 9829af2bf9228e48e819e1dfcd5c70bfe175e9ffe816706a41250430cf892afc
- MD5 16a660e50086e47a2202097a8d3e58d5
- SHA1 2839e65d5920aacb9daa0fb0260aa33724d6713f
- SHA512 7f6b07d82af20d6ddad49d43def0839d26455d1f08c8e32fc697cfc58cda92c29b791c1af324dd71767c3f7910023e152928b368641f971b18180e86fd433d1b
- SSDEEP 196608:l8Vb618U6D8Vb618U6a2VhF8Vb618U6D8Vb618U6a2VhgD:2cpcveccpcveyD
- TLSH T164279E07F69540F5D16AC430865A9332EA72BC560B31ABDF4390FA592F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_16a660e50086e47a2202097a8d3e58d5_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_16a660e50086e47a2202097a8d3e58d5_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_16a660e50086e47a2202097a8d3e58d5_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 19.8MB
- SHA256 9829af2bf9228e48e819e1dfcd5c70bfe175e9ffe816706a41250430cf892afc
- MD5 16a660e50086e47a2202097a8d3e58d5
- SHA1 2839e65d5920aacb9daa0fb0260aa33724d6713f
- SHA512 7f6b07d82af20d6ddad49d43def0839d26455d1f08c8e32fc697cfc58cda92c29b791c1af324dd71767c3f7910023e152928b368641f971b18180e86fd433d1b
- SSDEEP 196608:l8Vb618U6D8Vb618U6a2VhF8Vb618U6D8Vb618U6a2VhgD:2cpcveccpcveyD
- TLSH T164279E07F69540F5D16AC430865A9332EA72BC560B31ABDF4390FA592F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry