General
- Target 2026-07-14_35b32cf7c6d1754d8149797692e3cbfa_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 13.7MB
- Sample260714-2fcfdag12y
- SHA256 36dee7cd235723ca65e17e644ffa355b60be4caca1ccbb3738651a8464b04138
- MD5 35b32cf7c6d1754d8149797692e3cbfa
- SHA1 05899d28ea76d29c8fc9fc36fbd31a75206598cc
- SHA512 a8c453371d9d44d42fa147fe7c636e68554e52c50e0f389e468392799f8a66888d655b7d7968337cd2e4857d1b626f015672ee75b182c080db6653ca3a6ee346
- SSDEEP 98304:Su5x6M1c/h1+tZzPBNuu5x6M1c/h1+tZzPBNeq9ceq9+2xl/SSayeoq2Vjnm:Jw/h1+Tlw/h1+TeWqQI0pyeGn
- TLSH T1CDE69D13F2E841E8D0AAD17887669732FA72BC465B30A6DF0750B7191E37AD09B3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_35b32cf7c6d1754d8149797692e3cbfa_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_35b32cf7c6d1754d8149797692e3cbfa_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_35b32cf7c6d1754d8149797692e3cbfa_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 13.7MB
- SHA256 36dee7cd235723ca65e17e644ffa355b60be4caca1ccbb3738651a8464b04138
- MD5 35b32cf7c6d1754d8149797692e3cbfa
- SHA1 05899d28ea76d29c8fc9fc36fbd31a75206598cc
- SHA512 a8c453371d9d44d42fa147fe7c636e68554e52c50e0f389e468392799f8a66888d655b7d7968337cd2e4857d1b626f015672ee75b182c080db6653ca3a6ee346
- SSDEEP 98304:Su5x6M1c/h1+tZzPBNuu5x6M1c/h1+tZzPBNeq9ceq9+2xl/SSayeoq2Vjnm:Jw/h1+Tlw/h1+TeWqQI0pyeGn
- TLSH T1CDE69D13F2E841E8D0AAD17887669732FA72BC465B30A6DF0750B7191E37AD09B3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry