General
- Target 2026-07-20_3cc8b94c736056deb40f84cd49326424_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 8.6MB
- Sample260720-l4a98ad17r
- SHA256 bd84e88e31e57050ae77fbff68f49a5c4c731ccc9667d2d07df8db0cdf3417a8
- MD5 3cc8b94c736056deb40f84cd49326424
- SHA1 82dfa22c719ab9900a59d4e63f961c4b8a2ff7c5
- SHA512 1acc0255eafc06d18556ef7e8ad600856d4f8d3e460d468834d4cd02711415b1f63757b440a854ff2f6992919c21a828a40e44e192ffba9ad3841797a358048a
- SSDEEP 98304:+e5x6c1QVb6nUm8oe5x6c1QVb6nEe5x6c1QVb6nUm8oe5x6c1QVb6nYj:l8Vb618L8Vb6H8Vb618L8Vb6Yj
- TLSH T18C96AE17F69540F5D17A993046AA9332EB72B8120B319BCF93A4C7191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_3cc8b94c736056deb40f84cd49326424_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_3cc8b94c736056deb40f84cd49326424_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_3cc8b94c736056deb40f84cd49326424_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 8.6MB
- SHA256 bd84e88e31e57050ae77fbff68f49a5c4c731ccc9667d2d07df8db0cdf3417a8
- MD5 3cc8b94c736056deb40f84cd49326424
- SHA1 82dfa22c719ab9900a59d4e63f961c4b8a2ff7c5
- SHA512 1acc0255eafc06d18556ef7e8ad600856d4f8d3e460d468834d4cd02711415b1f63757b440a854ff2f6992919c21a828a40e44e192ffba9ad3841797a358048a
- SSDEEP 98304:+e5x6c1QVb6nUm8oe5x6c1QVb6nEe5x6c1QVb6nUm8oe5x6c1QVb6nYj:l8Vb618L8Vb6H8Vb618L8Vb6Yj
- TLSH T18C96AE17F69540F5D17A993046AA9332EB72B8120B319BCF93A4C7191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry