General
- Target 2026-07-15_1804aaca17dfd3b8926c28b2b20639c0_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 18.5MB
- Sample260716-ancbssht8p
- SHA256 ae6e407e1d2e006e663de8ba98df07c0771938ef6d100539f47ae18ca2283ea2
- MD5 1804aaca17dfd3b8926c28b2b20639c0
- SHA1 46dae365631dbedcadc7fad3280918891319a646
- SHA512 e59223ac59e61bde22e4ff0cc78936a2f349ed27bede9dd841c24dab7b65fe1d6aad140ab2d428d4f7786aaefa04549b5c5cad1c6c3333f5032fbebe21fae29f
- SSDEEP 196608:Jw/h1+vKmd0hw/h1+vKmd0NWyZ/K0ttYVAAToGnHvyEYc/b3w8O:mqnqxyZ/K0ttYZToGHvyEYKbi
- TLSH T1C0177C13B6A440E5D1A6D134CE66C632E7727C494BF1A6EF2240B6D92F33AD07E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_1804aaca17dfd3b8926c28b2b20639c0_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_1804aaca17dfd3b8926c28b2b20639c0_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_1804aaca17dfd3b8926c28b2b20639c0_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 18.5MB
- SHA256 ae6e407e1d2e006e663de8ba98df07c0771938ef6d100539f47ae18ca2283ea2
- MD5 1804aaca17dfd3b8926c28b2b20639c0
- SHA1 46dae365631dbedcadc7fad3280918891319a646
- SHA512 e59223ac59e61bde22e4ff0cc78936a2f349ed27bede9dd841c24dab7b65fe1d6aad140ab2d428d4f7786aaefa04549b5c5cad1c6c3333f5032fbebe21fae29f
- SSDEEP 196608:Jw/h1+vKmd0hw/h1+vKmd0NWyZ/K0ttYVAAToGnHvyEYc/b3w8O:mqnqxyZ/K0ttYZToGHvyEYKbi
- TLSH T1C0177C13B6A440E5D1A6D134CE66C632E7727C494BF1A6EF2240B6D92F33AD07E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application