General
- Target 2026-07-20_65bb2c8270a888b4c0dbe16412c40bc8_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 35.0MB
- Sample260720-lqv3gags2w
- SHA256 6b55278f3ae1537acde4f1c193cdfc0c61f3f5bffb3c838a53a8546b88e8299c
- MD5 65bb2c8270a888b4c0dbe16412c40bc8
- SHA1 fc6f6d4cdfd69ea08b1deb36412a3e4900974d04
- SHA512 b74d84f211690020de96f4466695814cc7470611ab00c2b5f15b7a8229b20c42d08f216987960a14970cfbe79d51280136533519310b6c0044808a2793851c42
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vbe8Vb618U68Vb618US18Ufh8Vbd8Vb618U68Vb63:2cDcy+JcDcy+YcDcy+JcDcy+8/G
- TLSH T118879D17B69440F5D17AD5348AA68232EB72BC120B319BDF43A4F6192F336D05F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_65bb2c8270a888b4c0dbe16412c40bc8_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_65bb2c8270a888b4c0dbe16412c40bc8_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_65bb2c8270a888b4c0dbe16412c40bc8_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 35.0MB
- SHA256 6b55278f3ae1537acde4f1c193cdfc0c61f3f5bffb3c838a53a8546b88e8299c
- MD5 65bb2c8270a888b4c0dbe16412c40bc8
- SHA1 fc6f6d4cdfd69ea08b1deb36412a3e4900974d04
- SHA512 b74d84f211690020de96f4466695814cc7470611ab00c2b5f15b7a8229b20c42d08f216987960a14970cfbe79d51280136533519310b6c0044808a2793851c42
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vbe8Vb618U68Vb618US18Ufh8Vbd8Vb618U68Vb63:2cDcy+JcDcy+YcDcy+JcDcy+8/G
- TLSH T118879D17B69440F5D17AD5348AA68232EB72BC120B319BDF43A4F6192F336D05F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application