General
- Target 2026-07-18_60206a042b331b5b6b7af3a5702b214e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 26.4MB
- Sample260718-jpfv2scy5k
- SHA256 e9cac2d419ed1cc462823dc3b2b1011a49e1e5c32e0c0d2905385233ea79a4ff
- MD5 60206a042b331b5b6b7af3a5702b214e
- SHA1 c3b1b0e464b6fbb9124d5296511f7fdefeb8752b
- SHA512 6a2f37f4999be3953b1a50e84e7058f00aae9a7bcaf748d3c64ae2581fa71638e3298e2ddce1d7e03f59b2f2439e9030168985327ee661a68504f5754260ed37
- SSDEEP 196608:l8Vb618U68Vb618P8Vb618U68VbD8Vb618U68Vb618P8Vb618U68VbcWqQI0py1Y:2cDc9cD2cDc9cDqWqQjp2vyEYKbi
- TLSH T1F7578D13F6A440F5E16AD5348A669732EB72BC520B31ABCF4350F6192F33AD05E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_60206a042b331b5b6b7af3a5702b214e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_60206a042b331b5b6b7af3a5702b214e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_60206a042b331b5b6b7af3a5702b214e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 26.4MB
- SHA256 e9cac2d419ed1cc462823dc3b2b1011a49e1e5c32e0c0d2905385233ea79a4ff
- MD5 60206a042b331b5b6b7af3a5702b214e
- SHA1 c3b1b0e464b6fbb9124d5296511f7fdefeb8752b
- SHA512 6a2f37f4999be3953b1a50e84e7058f00aae9a7bcaf748d3c64ae2581fa71638e3298e2ddce1d7e03f59b2f2439e9030168985327ee661a68504f5754260ed37
- SSDEEP 196608:l8Vb618U68Vb618P8Vb618U68VbD8Vb618U68Vb618P8Vb618U68VbcWqQI0py1Y:2cDc9cD2cDc9cDqWqQjp2vyEYKbi
- TLSH T1F7578D13F6A440F5E16AD5348A669732EB72BC520B31ABCF4350F6192F33AD05E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application