General
- Target 2026-07-14_a695ac2844e82074b84fe17b35d06f14_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- Sample260714-dwadysfv7z
- SHA256 d456a42d67e295a19b3d54ad779f19d5b3b548fe88b6f33c761130eff4601f5c
- MD5 a695ac2844e82074b84fe17b35d06f14
- SHA1 ca22392a8f039da931636513cf74c141033190cd
- SHA512 18e51f3bd963df01df6591d63e4a326671fc356a14753ec6e9923b7fb2c0cecfcbd65700c5300a8df0dd5c25a64eedc82f3ba1a6c1aaca023c76b21509775a4a
- SSDEEP 98304:10nAAYEprhOQA91pH2WpjHrgBFFu416AWvl:KNeQmHpn6F44IAWvl
- TLSH T123766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA562F736286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_a695ac2844e82074b84fe17b35d06f14_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_a695ac2844e82074b84fe17b35d06f14_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- SHA256 d456a42d67e295a19b3d54ad779f19d5b3b548fe88b6f33c761130eff4601f5c
- MD5 a695ac2844e82074b84fe17b35d06f14
- SHA1 ca22392a8f039da931636513cf74c141033190cd
- SHA512 18e51f3bd963df01df6591d63e4a326671fc356a14753ec6e9923b7fb2c0cecfcbd65700c5300a8df0dd5c25a64eedc82f3ba1a6c1aaca023c76b21509775a4a
- SSDEEP 98304:10nAAYEprhOQA91pH2WpjHrgBFFu416AWvl:KNeQmHpn6F44IAWvl
- TLSH T123766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA562F736286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE