General
- Target 2026-07-19_023205bc35f61cd66ba7d4ceddfda5e7_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 9.8MB
- Sample260719-3vc6wsbx2w
- SHA256 26acfdc69ccd81f7e864f62a7df9390805d82e7e88d6c2edbaaf2b4825e17028
- MD5 023205bc35f61cd66ba7d4ceddfda5e7
- SHA1 162454668ffc9396e5aae3b4330785d569346b0b
- SHA512 9f932b144cbef91e1256af830956473a074dea526fdb5bd41e5ed70af4819f43ad0a1c835561283b949af4d0fd22f1f263b95eab58cd3af3ab830bc2a357b005
- SSDEEP 98304:Uu5x6M1Ku5x6M1wu5x6M1Joq2Vjnm4u5x6M1Ku5x6M1wu5x6M1Joq2VjnmMD:ndP9GnudP9GndD
- TLSH T109A69E16B6A4C0F1C2B68A3445A69776F732B8154B31DBDBC365CA1D2E336D09D3A332
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_023205bc35f61cd66ba7d4ceddfda5e7_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_023205bc35f61cd66ba7d4ceddfda5e7_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_023205bc35f61cd66ba7d4ceddfda5e7_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 9.8MB
- SHA256 26acfdc69ccd81f7e864f62a7df9390805d82e7e88d6c2edbaaf2b4825e17028
- MD5 023205bc35f61cd66ba7d4ceddfda5e7
- SHA1 162454668ffc9396e5aae3b4330785d569346b0b
- SHA512 9f932b144cbef91e1256af830956473a074dea526fdb5bd41e5ed70af4819f43ad0a1c835561283b949af4d0fd22f1f263b95eab58cd3af3ab830bc2a357b005
- SSDEEP 98304:Uu5x6M1Ku5x6M1wu5x6M1Joq2Vjnm4u5x6M1Ku5x6M1wu5x6M1Joq2VjnmMD:ndP9GnudP9GndD
- TLSH T109A69E16B6A4C0F1C2B68A3445A69776F732B8154B31DBDBC365CA1D2E336D09D3A332
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry