General
- Target 2026-07-20_9fb572b306a7fa2bcb2bfd0cb789b5b9_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 28.4MB
- Sample260720-xrfjysd14x
- SHA256 9f574c4c6c9a989f7d249ee27262dc99450aaaa317d6edec712174073be24714
- MD5 9fb572b306a7fa2bcb2bfd0cb789b5b9
- SHA1 f09c51112a4c373ebf65ef045351d48ccf09827e
- SHA512 b266f7900d61f99909b559cc31da7b55a508a77fb85f2fe70ee3990958f4aa0658719d6a33a2dde46aca8fd785164d921f4347fbcb94e745c130d71abd1a811a
- SSDEEP 196608:l8Vb618U68Vb618US18Ui8Vb618U68Vb618US18Uxp8Vb618U68Vb618US18Ui8:2cDcyjcDcylacDcyjcDcylpo
- TLSH T1F6579D17F69440F9D06ED5748A558232EA72BC520B31ABDF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_9fb572b306a7fa2bcb2bfd0cb789b5b9_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_9fb572b306a7fa2bcb2bfd0cb789b5b9_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_9fb572b306a7fa2bcb2bfd0cb789b5b9_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 28.4MB
- SHA256 9f574c4c6c9a989f7d249ee27262dc99450aaaa317d6edec712174073be24714
- MD5 9fb572b306a7fa2bcb2bfd0cb789b5b9
- SHA1 f09c51112a4c373ebf65ef045351d48ccf09827e
- SHA512 b266f7900d61f99909b559cc31da7b55a508a77fb85f2fe70ee3990958f4aa0658719d6a33a2dde46aca8fd785164d921f4347fbcb94e745c130d71abd1a811a
- SSDEEP 196608:l8Vb618U68Vb618US18Ui8Vb618U68Vb618US18Uxp8Vb618U68Vb618US18Ui8:2cDcyjcDcylacDcyjcDcylpo
- TLSH T1F6579D17F69440F9D06ED5748A558232EA72BC520B31ABDF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry