General
- Target 2026-07-18_0cb1685d205720c5bde15b38f949aad3_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 48.6MB
- Sample260718-ktk61aev9k
- SHA256 f09ff4503caf906c0d6d0f62b38daceeed5f293cd878460cf6829c7cc7e1fe03
- MD5 0cb1685d205720c5bde15b38f949aad3
- SHA1 1b6bb4088547f477133faa0844f6d453386c1033
- SHA512 6913f083dddd01e63c683642618e62011276ffb7c4ce48727b1fb5e69653f8b5805ece389ba9a98508f58e0f0ba039bb4b46bf2f2e396c0e379d212cc5fc1858
- SSDEEP 393216:2cDc9cD2cDc9cDqWqQjpmcDc9cD2cDc9cDqWqQjp6WqQjp3:tA2ZA25fjp9A2ZA25fjpFfjp3
- TLSH T113B79D13F6A540F5E06AD5748A669332EA72BC520B31A7CF4350F6192F33AD06F39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_0cb1685d205720c5bde15b38f949aad3_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_0cb1685d205720c5bde15b38f949aad3_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_0cb1685d205720c5bde15b38f949aad3_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 48.6MB
- SHA256 f09ff4503caf906c0d6d0f62b38daceeed5f293cd878460cf6829c7cc7e1fe03
- MD5 0cb1685d205720c5bde15b38f949aad3
- SHA1 1b6bb4088547f477133faa0844f6d453386c1033
- SHA512 6913f083dddd01e63c683642618e62011276ffb7c4ce48727b1fb5e69653f8b5805ece389ba9a98508f58e0f0ba039bb4b46bf2f2e396c0e379d212cc5fc1858
- SSDEEP 393216:2cDc9cD2cDc9cDqWqQjpmcDc9cD2cDc9cDqWqQjp6WqQjp3:tA2ZA25fjp9A2ZA25fjpFfjp3
- TLSH T113B79D13F6A540F5E06AD5748A669332EA72BC520B31A7CF4350F6192F33AD06F39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application