General
- Target 2026-07-20_5e6d0ef8891cfb1e75472727dc6e5dfa_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 38.9MB
- Sample260720-x53awaex3w
- SHA256 471f15edbf7a6567eab028f7df4728d98289949db06a8b149e55c1436ba53c43
- MD5 5e6d0ef8891cfb1e75472727dc6e5dfa
- SHA1 24515f6632356a074cef8b737fb2f43fab67a2da
- SHA512 a72c53aa43adc0cd79b7afb6aa978c185ae8b03b8cd2f61bf65da3435f52c549fb311d6539d1da2e6ca272dbd209d0ef808842233df68ad9f41a60a89e15617b
- SSDEEP 196608:l8Vb618U68Vb618US18Ui8Vb618U68Vb618US18Uxp8Vb618U68Vb618US18Ui8u:2cDcyjcDcylacDcyjcDcylXcDcyjcDcy
- TLSH T1AD979D17F69440F9D06ED5748A558236EA72BC520B31ABCF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_5e6d0ef8891cfb1e75472727dc6e5dfa_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_5e6d0ef8891cfb1e75472727dc6e5dfa_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_5e6d0ef8891cfb1e75472727dc6e5dfa_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 38.9MB
- SHA256 471f15edbf7a6567eab028f7df4728d98289949db06a8b149e55c1436ba53c43
- MD5 5e6d0ef8891cfb1e75472727dc6e5dfa
- SHA1 24515f6632356a074cef8b737fb2f43fab67a2da
- SHA512 a72c53aa43adc0cd79b7afb6aa978c185ae8b03b8cd2f61bf65da3435f52c549fb311d6539d1da2e6ca272dbd209d0ef808842233df68ad9f41a60a89e15617b
- SSDEEP 196608:l8Vb618U68Vb618US18Ui8Vb618U68Vb618US18Uxp8Vb618U68Vb618US18Ui8u:2cDcyjcDcylacDcyjcDcylXcDcyjcDcy
- TLSH T1AD979D17F69440F9D06ED5748A558236EA72BC520B31ABCF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application