General
- Target 2026-07-18_2c6747d81f537d064aecf91f3a7b5ac0_elex_emotet_glassworm_icedid_remcos_vidar
- Size 8.5MB
- Sample260718-kd2h2sg17s
- SHA256 7c1fe886e77505a6c31ce489274b4849856652deaa6daede8205e97533520ce4
- MD5 2c6747d81f537d064aecf91f3a7b5ac0
- SHA1 1fafb1fec80846ee84c1e4acda752afbf2b86683
- SHA512 5e2f8b1c42ed2459ff68d24045b9be5bc9371a7f86b779ea878dc2d56eec2085f8fc5c013adc29c1c9335ebae311a6898737e178e1bf0cbd12d70d5607c51aaa
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDwu5x6M1WoDDklJ6qCu5x6M1WoDG:Qi8kLriMi8kLriD
- TLSH T13F969E02B6D440BAE27E4A3095769632DB76BD420B11DBCF9790F65E2E327C09E35327
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_2c6747d81f537d064aecf91f3a7b5ac0_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_2c6747d81f537d064aecf91f3a7b5ac0_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_2c6747d81f537d064aecf91f3a7b5ac0_elex_emotet_glassworm_icedid_remcos_vidar
- Size 8.5MB
- SHA256 7c1fe886e77505a6c31ce489274b4849856652deaa6daede8205e97533520ce4
- MD5 2c6747d81f537d064aecf91f3a7b5ac0
- SHA1 1fafb1fec80846ee84c1e4acda752afbf2b86683
- SHA512 5e2f8b1c42ed2459ff68d24045b9be5bc9371a7f86b779ea878dc2d56eec2085f8fc5c013adc29c1c9335ebae311a6898737e178e1bf0cbd12d70d5607c51aaa
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDwu5x6M1WoDDklJ6qCu5x6M1WoDG:Qi8kLriMi8kLriD
- TLSH T13F969E02B6D440BAE27E4A3095769632DB76BD420B11DBCF9790F65E2E327C09E35327
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry