General
- Target 2026-07-20_b8f4f8ce8362476ff721e6f44873a85f_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 38.8MB
- Sample260720-xmcbqsdy6y
- SHA256 e255aa6346dd13013a426ccf1c1b527e1f85eb2bf8e3da88c78715825fad8808
- MD5 b8f4f8ce8362476ff721e6f44873a85f
- SHA1 b697d71cbf95bc1fc6774bd4dfb48fc0b55228cb
- SHA512 4638932e4cbfb7d3568df6b33c272cabbf0073f202e8abfe680e345c1c85be6c8cb8492acdd6a498fe66fc8be6d5f5aac4523b63ae5bb3e41fb294033f88ff3f
- SSDEEP 196608:l8Vb618U68Vb618US18Ui8Vb618U68Vb618US18Uxp8Vb618U68Vb618US18Ui8t:2cDcyjcDcylacDcyjcDcylXcDcyjcDcx
- TLSH T194979D17F69540F9D06ED5348A558236EA72BC520B31ABCF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_b8f4f8ce8362476ff721e6f44873a85f_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_b8f4f8ce8362476ff721e6f44873a85f_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_b8f4f8ce8362476ff721e6f44873a85f_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 38.8MB
- SHA256 e255aa6346dd13013a426ccf1c1b527e1f85eb2bf8e3da88c78715825fad8808
- MD5 b8f4f8ce8362476ff721e6f44873a85f
- SHA1 b697d71cbf95bc1fc6774bd4dfb48fc0b55228cb
- SHA512 4638932e4cbfb7d3568df6b33c272cabbf0073f202e8abfe680e345c1c85be6c8cb8492acdd6a498fe66fc8be6d5f5aac4523b63ae5bb3e41fb294033f88ff3f
- SSDEEP 196608:l8Vb618U68Vb618US18Ui8Vb618U68Vb618US18Uxp8Vb618U68Vb618US18Ui8t:2cDcyjcDcylacDcyjcDcylXcDcyjcDcx
- TLSH T194979D17F69540F9D06ED5348A558236EA72BC520B31ABCF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Drops file in Drivers directory
Adds Run key to start application