General
- Target 2026-07-18_fe65bf979f3629a09de947387e38b280_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 44.7MB
- Sample260718-gdpygacy6t
- SHA256 a94cf02b7853f7dfc655db58117aaf0e5febeafbaab5c70142b52f22b12dcf85
- MD5 fe65bf979f3629a09de947387e38b280
- SHA1 baf7a6cdec99f8b5d61f1a85c15935706ecc6d9b
- SHA512 0e08602e1800ff6d6eb2a1868d3c94de5d1c6dd5c900ff4e04fb27c85fe07dcdb3e459e822babbf1f2909a2321f5226e47cd891d37cf7b19d814a5ca8dc76fe7
- SSDEEP 393216:2cDc9cD2cDc9cDqWqQjpmcDc9cD2cDc9cDqWqQjp6:tA2ZA25fjp9A2ZA25fjp6
- TLSH T1EFA79D13F6A540F5E16AD5308A669332EA72BC520B3197CF4354F6192F33AD06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_fe65bf979f3629a09de947387e38b280_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_fe65bf979f3629a09de947387e38b280_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_fe65bf979f3629a09de947387e38b280_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 44.7MB
- SHA256 a94cf02b7853f7dfc655db58117aaf0e5febeafbaab5c70142b52f22b12dcf85
- MD5 fe65bf979f3629a09de947387e38b280
- SHA1 baf7a6cdec99f8b5d61f1a85c15935706ecc6d9b
- SHA512 0e08602e1800ff6d6eb2a1868d3c94de5d1c6dd5c900ff4e04fb27c85fe07dcdb3e459e822babbf1f2909a2321f5226e47cd891d37cf7b19d814a5ca8dc76fe7
- SSDEEP 393216:2cDc9cD2cDc9cDqWqQjpmcDc9cD2cDc9cDqWqQjp6:tA2ZA25fjp9A2ZA25fjp6
- TLSH T1EFA79D13F6A540F5E16AD5308A669332EA72BC520B3197CF4354F6192F33AD06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry