General
- Target 2026-07-18_c103dcfb3695bc20576efe32157fb950_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 44.7MB
- Sample260718-g72jcsay3l
- SHA256 7d5e4537d57123fc8e3fc6d6ee2c23fff282754c6c3ca84c1a3bcd6409f1f9b6
- MD5 c103dcfb3695bc20576efe32157fb950
- SHA1 ee08d5ebc08dea5784be1cb366980c481a76e253
- SHA512 dd3c3e258583337dcc827c56c5b867f69208278ac698486adb3de7a998511963dbf2a212242638b9bbc93fcdfee4a29e3a9f0bcb354df552a087ecdd672e6f64
- SSDEEP 393216:2cDc9cD2cDc9cDqWqQjpmcDc9cD2cDc9cDqWqQjpo:tA2ZA25fjp9A2ZA25fjpo
- TLSH T175A79D13F6A540F5E16AD5308A669332EA72BC520B3197CF4354F6192F33AD06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_c103dcfb3695bc20576efe32157fb950_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_c103dcfb3695bc20576efe32157fb950_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_c103dcfb3695bc20576efe32157fb950_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 44.7MB
- SHA256 7d5e4537d57123fc8e3fc6d6ee2c23fff282754c6c3ca84c1a3bcd6409f1f9b6
- MD5 c103dcfb3695bc20576efe32157fb950
- SHA1 ee08d5ebc08dea5784be1cb366980c481a76e253
- SHA512 dd3c3e258583337dcc827c56c5b867f69208278ac698486adb3de7a998511963dbf2a212242638b9bbc93fcdfee4a29e3a9f0bcb354df552a087ecdd672e6f64
- SSDEEP 393216:2cDc9cD2cDc9cDqWqQjpmcDc9cD2cDc9cDqWqQjpo:tA2ZA25fjp9A2ZA25fjpo
- TLSH T175A79D13F6A540F5E16AD5308A669332EA72BC520B3197CF4354F6192F33AD06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application