General
- Target 2026-07-20_00ea8937be9d03d6d523ead93fb57fe4_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.4MB
- Sample260720-d7v5ssd19q
- SHA256 b274be8b501b5162db7d48d937b9b505bac63e484fe0b4b1a96c2e52d052cf9f
- MD5 00ea8937be9d03d6d523ead93fb57fe4
- SHA1 f6dee291080997d10197804ff8eb7028f502dcb8
- SHA512 767f624eedc3dea3c6c9e1c03b09e5ff197a795284a58f6240d6dfde7827f077b2f555b94f5906b70547aeaa1a068fee996ed370c2e3adb3f9c2fb7668fbe4a7
- SSDEEP 98304:L0nAAYEpmheQA91pH2WpjHrgBFFu416AWvA:YNRQmHpn6F44IAWvA
- TLSH T1BA764AA562A7A0FCE46ED075CB2687B2E6713C274071930B16BCFA563F736142D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_00ea8937be9d03d6d523ead93fb57fe4_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_00ea8937be9d03d6d523ead93fb57fe4_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.4MB
- SHA256 b274be8b501b5162db7d48d937b9b505bac63e484fe0b4b1a96c2e52d052cf9f
- MD5 00ea8937be9d03d6d523ead93fb57fe4
- SHA1 f6dee291080997d10197804ff8eb7028f502dcb8
- SHA512 767f624eedc3dea3c6c9e1c03b09e5ff197a795284a58f6240d6dfde7827f077b2f555b94f5906b70547aeaa1a068fee996ed370c2e3adb3f9c2fb7668fbe4a7
- SSDEEP 98304:L0nAAYEpmheQA91pH2WpjHrgBFFu416AWvA:YNRQmHpn6F44IAWvA
- TLSH T1BA764AA562A7A0FCE46ED075CB2687B2E6713C274071930B16BCFA563F736142D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.