General
- Target 2026-07-18_0b40cde16f2819b05f5493ce9a6d685e_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- Sample260718-kvmq8aew4n
- SHA256 aa1adec3c3466b42f6505d47f14ed8853f98cb7a15a0edba86ce5c1b403c83b1
- MD5 0b40cde16f2819b05f5493ce9a6d685e
- SHA1 e51a2d23568d4c4add30785a6ab55ce947615657
- SHA512 3f3ea0fdb279df0357f6c671bcef4492d0cc6851da4a3b63b65b33bdcaac3978bdbaecd5f159debd82428f4c59d498d97492b088e69a219525e12b7b83b051b1
- SSDEEP 98304:y0nAAYEpqhgQA91pH2WpjHrgBFFu416AWvM:3NTQmHpn6F44IAWvM
- TLSH T1F2766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_0b40cde16f2819b05f5493ce9a6d685e_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_0b40cde16f2819b05f5493ce9a6d685e_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- SHA256 aa1adec3c3466b42f6505d47f14ed8853f98cb7a15a0edba86ce5c1b403c83b1
- MD5 0b40cde16f2819b05f5493ce9a6d685e
- SHA1 e51a2d23568d4c4add30785a6ab55ce947615657
- SHA512 3f3ea0fdb279df0357f6c671bcef4492d0cc6851da4a3b63b65b33bdcaac3978bdbaecd5f159debd82428f4c59d498d97492b088e69a219525e12b7b83b051b1
- SSDEEP 98304:y0nAAYEpqhgQA91pH2WpjHrgBFFu416AWvM:3NTQmHpn6F44IAWvM
- TLSH T1F2766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE