General
- Target 2026-07-15_d15d19b048e7809f78210b478989d125_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 53.7MB
- Sample260715-29cm8sbs2z
- SHA256 e7b2777fedf94ac3e9b35283ddf56c5561ea1bc094de7b8c8abaa2e48de55fec
- MD5 d15d19b048e7809f78210b478989d125
- SHA1 3f96ad3fedd4db7ba430eec84403072e6bb76c8c
- SHA512 f998d8cafb47e7c8feedbe8c25e337c028c2622b86a2872c8baaeb3ca96d48584265354c046671df8c793071dc5ed1ae3b61776125627e2fc3c12f2a8bee97b5
- SSDEEP 786432:IkLDkLevkLDkLecNkLDkLevkLDkLecSkLDkLevkLDkLecc:v6c86cl6cc
- TLSH T1E8C79F03B6E441A9E1BFC63496669532EA72BC450B21D7CF5690F61E2E33BD09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_d15d19b048e7809f78210b478989d125_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_d15d19b048e7809f78210b478989d125_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_d15d19b048e7809f78210b478989d125_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 53.7MB
- SHA256 e7b2777fedf94ac3e9b35283ddf56c5561ea1bc094de7b8c8abaa2e48de55fec
- MD5 d15d19b048e7809f78210b478989d125
- SHA1 3f96ad3fedd4db7ba430eec84403072e6bb76c8c
- SHA512 f998d8cafb47e7c8feedbe8c25e337c028c2622b86a2872c8baaeb3ca96d48584265354c046671df8c793071dc5ed1ae3b61776125627e2fc3c12f2a8bee97b5
- SSDEEP 786432:IkLDkLevkLDkLecNkLDkLevkLDkLecSkLDkLevkLDkLecc:v6c86cl6cc
- TLSH T1E8C79F03B6E441A9E1BFC63496669532EA72BC450B21D7CF5690F61E2E33BD09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry