General
- Target 2026-07-15_1dac3a444acae9d7cc05014134ed7f2d_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 40.6MB
- Sample260716-al4y2ahs5m
- SHA256 3ca669abda040e9e9530f9197787b7831ca3cbe4af9c418dddac8aab352c607a
- MD5 1dac3a444acae9d7cc05014134ed7f2d
- SHA1 4d6bf73f477d2759cbcb055ba1b6f6fb6a1ea425
- SHA512 69da6eb34e572133d1276f374a697738c19ac1a10744b337cab781e4f4adfadf8249995976569e3de18fdb34ec8103fa412c65d4c07d20350af9ff20062db538
- SSDEEP 786432:IkLDkLevkLDkLecNkLDkLevkLDkLecSkLM:v6c86cY
- TLSH T152979F02B6E441B9E1BFC63496669532EA72BC450B21D7CF5690F61E2E33BD09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_1dac3a444acae9d7cc05014134ed7f2d_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_1dac3a444acae9d7cc05014134ed7f2d_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_1dac3a444acae9d7cc05014134ed7f2d_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 40.6MB
- SHA256 3ca669abda040e9e9530f9197787b7831ca3cbe4af9c418dddac8aab352c607a
- MD5 1dac3a444acae9d7cc05014134ed7f2d
- SHA1 4d6bf73f477d2759cbcb055ba1b6f6fb6a1ea425
- SHA512 69da6eb34e572133d1276f374a697738c19ac1a10744b337cab781e4f4adfadf8249995976569e3de18fdb34ec8103fa412c65d4c07d20350af9ff20062db538
- SSDEEP 786432:IkLDkLevkLDkLecNkLDkLevkLDkLecSkLM:v6c86cY
- TLSH T152979F02B6E441B9E1BFC63496669532EA72BC450B21D7CF5690F61E2E33BD09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry