General
- Target 2026-07-15_d0d4b9294f656a622740b4f4cc0c483f_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 19.8MB
- Sample260715-29pykabs4s
- SHA256 012d6a62678b080f47aba72843bc598c7556cb81703fda21f8725bfa357e50ca
- MD5 d0d4b9294f656a622740b4f4cc0c483f
- SHA1 40b6a2265d747fff745e010362b8742abe3ede8d
- SHA512 784c106884f558150d74aeaf56188d7df2789db9b8d7bf4895880123764144855109bb6313a759fc61543064ea96b303d54cfb921578c197175f90dc44d39529
- SSDEEP 196608:l8Vb618U68Vb618P8Vb618U68VbD8Vb618U68Vb618P8Vb618U68VbwoK:2cDc9cD2cDc9cDCo
- TLSH T1AB279D17F69540F5D16A99308A569332EB72BC120B319BCF43A4F6192F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_d0d4b9294f656a622740b4f4cc0c483f_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_d0d4b9294f656a622740b4f4cc0c483f_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_d0d4b9294f656a622740b4f4cc0c483f_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 19.8MB
- SHA256 012d6a62678b080f47aba72843bc598c7556cb81703fda21f8725bfa357e50ca
- MD5 d0d4b9294f656a622740b4f4cc0c483f
- SHA1 40b6a2265d747fff745e010362b8742abe3ede8d
- SHA512 784c106884f558150d74aeaf56188d7df2789db9b8d7bf4895880123764144855109bb6313a759fc61543064ea96b303d54cfb921578c197175f90dc44d39529
- SSDEEP 196608:l8Vb618U68Vb618P8Vb618U68VbD8Vb618U68Vb618P8Vb618U68VbwoK:2cDc9cD2cDc9cDCo
- TLSH T1AB279D17F69540F5D16A99308A569332EB72BC120B319BCF43A4F6192F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application