General
- Target 2026-07-22_0764b2b4523585ec2cb3c8a6e76871e9_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 26.3MB
- Sample260722-wwrbksae76
- SHA256 f75b104f661bf1081041a8961830277992f8dd597f8dd443783fad5f8e141a7a
- MD5 0764b2b4523585ec2cb3c8a6e76871e9
- SHA1 659acd014d754e537592cf829c71c0d9484e5827
- SHA512 227bbec1e7ceba61ef9239127c90051f7da4dbf808acd44d6b4972fef16f131b7938560b7802dd37f09231932fba74e705d204d104b482e29a7844159b4c8304
- SSDEEP 196608:Qi8kLri8kL2vyEYc/b3w8zi8kLri8kL2vyEYc/b3w8OGnhi8kLriG:IkLDkL2vyEYKbPkLDkL2vyEYKbaGNkLj
- TLSH T13A576C527BE440B9E1AA963495768672E676BC420B31DBCF4290F61E2F337D09D39323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_0764b2b4523585ec2cb3c8a6e76871e9_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_0764b2b4523585ec2cb3c8a6e76871e9_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_0764b2b4523585ec2cb3c8a6e76871e9_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 26.3MB
- SHA256 f75b104f661bf1081041a8961830277992f8dd597f8dd443783fad5f8e141a7a
- MD5 0764b2b4523585ec2cb3c8a6e76871e9
- SHA1 659acd014d754e537592cf829c71c0d9484e5827
- SHA512 227bbec1e7ceba61ef9239127c90051f7da4dbf808acd44d6b4972fef16f131b7938560b7802dd37f09231932fba74e705d204d104b482e29a7844159b4c8304
- SSDEEP 196608:Qi8kLri8kL2vyEYc/b3w8zi8kLri8kL2vyEYc/b3w8OGnhi8kLriG:IkLDkL2vyEYKbPkLDkL2vyEYKbaGNkLj
- TLSH T13A576C527BE440B9E1AA963495768672E676BC420B31DBCF4290F61E2F337D09D39323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry