General
- Target 2026-07-23_02fc1ebbb2eaeafbb539203bbfe99fd7_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 2.8MB
- Sample260723-bt764acl4w
- SHA256 b01e0f6d7c9f7444e9056706ac8eb9a8db84b2097cc41dfd672e7c19cb45b065
- MD5 02fc1ebbb2eaeafbb539203bbfe99fd7
- SHA1 bb3edaf8c61506e550ff893c8526f2ff7cb5380a
- SHA512 b5f436829a2e87d7cb2feaa617123637512c7fa9d1866d172d5347a1a9f9f7f97d6ae7af971e12dab059517dc4c2d74655b96be62224803e8e2a7714a13771ed
- SSDEEP 49152:sY+sGc1TASKVbmYIBotpg0TunuNeeigv0XIMw4h2pk4PxKS5VinRfepLm7jn:/TAfVbwotpgruNeW0VHhL3S5VicLajn
- TLSH T17ED50266B7E802BAE4B7C67488A24616F7767C1507B0DB0F02D1865E1F33792AE79313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_02fc1ebbb2eaeafbb539203bbfe99fd7_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_02fc1ebbb2eaeafbb539203bbfe99fd7_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_02fc1ebbb2eaeafbb539203bbfe99fd7_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 2.8MB
- SHA256 b01e0f6d7c9f7444e9056706ac8eb9a8db84b2097cc41dfd672e7c19cb45b065
- MD5 02fc1ebbb2eaeafbb539203bbfe99fd7
- SHA1 bb3edaf8c61506e550ff893c8526f2ff7cb5380a
- SHA512 b5f436829a2e87d7cb2feaa617123637512c7fa9d1866d172d5347a1a9f9f7f97d6ae7af971e12dab059517dc4c2d74655b96be62224803e8e2a7714a13771ed
- SSDEEP 49152:sY+sGc1TASKVbmYIBotpg0TunuNeeigv0XIMw4h2pk4PxKS5VinRfepLm7jn:/TAfVbwotpgruNeW0VHhL3S5VicLajn
- TLSH T17ED50266B7E802BAE4B7C67488A24616F7767C1507B0DB0F02D1865E1F33792AE79313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2