General
- Target 2026-07-13_b13794b9f3c9309b4510a928380f4c47_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 48.9MB
- Sample260714-a5e41sbw7p
- SHA256 a1a6a291edccd2a06b70d8640298edf17370fe0785e938d9361429255cff0efb
- MD5 b13794b9f3c9309b4510a928380f4c47
- SHA1 b1b4eadd08bf07cab262be70de329587a3b121c3
- SHA512 780728dbedd6b0cb1d5d25ae69ee9ecafff833ca845ad1475dad5c1ebb19424ffc12f733383162d4becb369d010b7be7872cf4db5bafc0e801d32581168a2ab6
- SSDEEP 393216:2cpcveccpcveWeccpcveccpcveWeYWqQjp3:t6mX6mfX6mX6mfffjp3
- TLSH T16DB79D03F69540F5D06AD574865A9332EA72BC460B31A7DF0390FA592F33AD06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_b13794b9f3c9309b4510a928380f4c47_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_b13794b9f3c9309b4510a928380f4c47_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_b13794b9f3c9309b4510a928380f4c47_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 48.9MB
- SHA256 a1a6a291edccd2a06b70d8640298edf17370fe0785e938d9361429255cff0efb
- MD5 b13794b9f3c9309b4510a928380f4c47
- SHA1 b1b4eadd08bf07cab262be70de329587a3b121c3
- SHA512 780728dbedd6b0cb1d5d25ae69ee9ecafff833ca845ad1475dad5c1ebb19424ffc12f733383162d4becb369d010b7be7872cf4db5bafc0e801d32581168a2ab6
- SSDEEP 393216:2cpcveccpcveWeccpcveccpcveWeYWqQjp3:t6mX6mfX6mX6mfffjp3
- TLSH T16DB79D03F69540F5D06AD574865A9332EA72BC460B31A7DF0390FA592F33AD06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application