General
- Target 2026-07-20_0391b06b7ee5a839f369ff186c78439b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 32.4MB
- Sample260720-mpsrdse15m
- SHA256 6fab8115965200ec4afca010601bbd8ce886ac31007c1a786e2df4c29837976f
- MD5 0391b06b7ee5a839f369ff186c78439b
- SHA1 2711ad6c214e669db5c6c76caeab939d0da92957
- SHA512 e44f3f96c0d55af76be56d4c10564c8a890aca3f4fab0b959f63b439c7001b323ac928913167d3a93d2db4ff663df6fb1a8917d556fe7651482b8dee8d992be6
- SSDEEP 196608:l8Vb618U68Vb618US18Ui8Vb618U68Vb618US18Uxp8Vb618U68Vb618US18Ui8C:2cDcyjcDcylacDcyjcDcylXcDc7
- TLSH T1D5779D17F69440F9D06ED5748A558236EA72BC520B31ABCF43A0F6192F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_0391b06b7ee5a839f369ff186c78439b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_0391b06b7ee5a839f369ff186c78439b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_0391b06b7ee5a839f369ff186c78439b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 32.4MB
- SHA256 6fab8115965200ec4afca010601bbd8ce886ac31007c1a786e2df4c29837976f
- MD5 0391b06b7ee5a839f369ff186c78439b
- SHA1 2711ad6c214e669db5c6c76caeab939d0da92957
- SHA512 e44f3f96c0d55af76be56d4c10564c8a890aca3f4fab0b959f63b439c7001b323ac928913167d3a93d2db4ff663df6fb1a8917d556fe7651482b8dee8d992be6
- SSDEEP 196608:l8Vb618U68Vb618US18Ui8Vb618U68Vb618US18Uxp8Vb618U68Vb618US18Ui8C:2cDcyjcDcylacDcyjcDcylXcDc7
- TLSH T1D5779D17F69440F9D06ED5748A558236EA72BC520B31ABCF43A0F6192F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Drops file in Drivers directory
Adds Run key to start application