General
- Target 2026-07-20_3aef540cf78630d93e38d642f97cec43_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 26.8MB
- Sample260720-l45ttses4n
- SHA256 ffd3d41222d78e95bbdeb5a266fdfbf7af83d4375ab0251fcec47ff7826d44ff
- MD5 3aef540cf78630d93e38d642f97cec43
- SHA1 1ab8b60dee82a3b2b3041498233532bbffe1234a
- SHA512 4fc26917a56056acce10f4450889c8afa8c37624422ee159f5a372eb865cbf30f44c7f127d40ec03cb5557539db6dfc8f4a9833285e352b02f49be7744c93697
- SSDEEP 196608:l8Vb618U68Vb618US18Ui8Vb618U68Vb618US18Uxp8Vb618U68Vb618US18Ui8a:2cDcyjcDcylacDcyjcDcylRj
- TLSH T124579D17F69440F9D06ED5748A558236EA72BC520B31ABCF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_3aef540cf78630d93e38d642f97cec43_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_3aef540cf78630d93e38d642f97cec43_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_3aef540cf78630d93e38d642f97cec43_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 26.8MB
- SHA256 ffd3d41222d78e95bbdeb5a266fdfbf7af83d4375ab0251fcec47ff7826d44ff
- MD5 3aef540cf78630d93e38d642f97cec43
- SHA1 1ab8b60dee82a3b2b3041498233532bbffe1234a
- SHA512 4fc26917a56056acce10f4450889c8afa8c37624422ee159f5a372eb865cbf30f44c7f127d40ec03cb5557539db6dfc8f4a9833285e352b02f49be7744c93697
- SSDEEP 196608:l8Vb618U68Vb618US18Ui8Vb618U68Vb618US18Uxp8Vb618U68Vb618US18Ui8a:2cDcyjcDcylacDcyjcDcylRj
- TLSH T124579D17F69440F9D06ED5748A558236EA72BC520B31ABCF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application