General
- Target 2026-07-20_1f1f1ef30cd880db254ea4f1833eaecf_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 13.7MB
- Sample260720-mfajfsew7q
- SHA256 7b82f517fedb76ed840f18a7a6133dec752a6b62cba78a382a5fa7b710c7f799
- MD5 1f1f1ef30cd880db254ea4f1833eaecf
- SHA1 006e53c09d985e7e1aa1504a1db2378b8ada5504
- SHA512 44b8b3f0f8fd754ad06926b60384ec65377b6d2a8d06db80e54d76dc794f75e973245731c54109a66994d0c97c6423d8ccc756d7ba6cb4d2aada6168f4d5a6c4
- SSDEEP 98304:Uu5x6M1Ku5x6M1wu5x6M1Joq2Vjnm4u5x6M1Ku5x6M1wu5x6M1Joq2Vjnm+q9ceJ:ndP9GnudP9Gn5WqQI0py+
- TLSH T13DE69D07F6A880F5D1AAC67446669732EB72BC114B3097DF4354F61D2E33AD09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_1f1f1ef30cd880db254ea4f1833eaecf_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_1f1f1ef30cd880db254ea4f1833eaecf_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_1f1f1ef30cd880db254ea4f1833eaecf_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 13.7MB
- SHA256 7b82f517fedb76ed840f18a7a6133dec752a6b62cba78a382a5fa7b710c7f799
- MD5 1f1f1ef30cd880db254ea4f1833eaecf
- SHA1 006e53c09d985e7e1aa1504a1db2378b8ada5504
- SHA512 44b8b3f0f8fd754ad06926b60384ec65377b6d2a8d06db80e54d76dc794f75e973245731c54109a66994d0c97c6423d8ccc756d7ba6cb4d2aada6168f4d5a6c4
- SSDEEP 98304:Uu5x6M1Ku5x6M1wu5x6M1Joq2Vjnm4u5x6M1Ku5x6M1wu5x6M1Joq2Vjnm+q9ceJ:ndP9GnudP9Gn5WqQI0py+
- TLSH T13DE69D07F6A880F5D1AAC67446669732EB72BC114B3097DF4354F61D2E33AD09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry