General
- Target 2026-07-19_34d649c324585176653951753105218f_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- Sample260719-ybcnssds5t
- SHA256 822a15a62ef04501b9492acd9713b68095d82558390d65a38c4fd993b06938c3
- MD5 34d649c324585176653951753105218f
- SHA1 742d55eb20321888bb7c3b0fcd42b985de898845
- SHA512 4dc0fba37329bf14d9d23e2387be729e3971f94b86beaf594283ab1678e3dd5a4c79bdbcf89134cb800a3c44468decd6910b235893a318c0c087734cca01050a
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFouL:0NA1Yakeer5+nsos
- TLSH T16905A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_34d649c324585176653951753105218f_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_34d649c324585176653951753105218f_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_34d649c324585176653951753105218f_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- SHA256 822a15a62ef04501b9492acd9713b68095d82558390d65a38c4fd993b06938c3
- MD5 34d649c324585176653951753105218f
- SHA1 742d55eb20321888bb7c3b0fcd42b985de898845
- SHA512 4dc0fba37329bf14d9d23e2387be729e3971f94b86beaf594283ab1678e3dd5a4c79bdbcf89134cb800a3c44468decd6910b235893a318c0c087734cca01050a
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFouL:0NA1Yakeer5+nsos
- TLSH T16905A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Contacts a large (1223) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Adds Run key to start application
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.