General
- Target 2026-07-23_370479f54bc4297a941a631dee0e2186_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar
- Size 16.1MB
- Sample260723-gp6elaha33
- SHA256 9e69a6151845ec6f8eeaf6905e07bb5b27916019865b58d4a74a9d916abe4c1e
- MD5 370479f54bc4297a941a631dee0e2186
- SHA1 458a904940a5afb004b5a2ab1fa715e215b62ada
- SHA512 cd4ef3173be30a47b58cc5443c68c305bae00e85e51b0cacba4fd05b159f6e0e0701ca9638c46b10f2795d35ca961651d536534422e858a0089303a3ea1f6b34
- SSDEEP 393216:sWSOHiJiuyW8ZPuCAXbWAq4tpB9PXBm27Yd3f:sWSOFW8MCMtpB9PXP7MP
- TLSH T14A0733287BA500E6FCD9937978E0D066A2D47E9A0BA4C69753F54A500D732C6FFB2313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_370479f54bc4297a941a631dee0e2186_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_370479f54bc4297a941a631dee0e2186_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_370479f54bc4297a941a631dee0e2186_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar
- Size 16.1MB
- SHA256 9e69a6151845ec6f8eeaf6905e07bb5b27916019865b58d4a74a9d916abe4c1e
- MD5 370479f54bc4297a941a631dee0e2186
- SHA1 458a904940a5afb004b5a2ab1fa715e215b62ada
- SHA512 cd4ef3173be30a47b58cc5443c68c305bae00e85e51b0cacba4fd05b159f6e0e0701ca9638c46b10f2795d35ca961651d536534422e858a0089303a3ea1f6b34
- SSDEEP 393216:sWSOHiJiuyW8ZPuCAXbWAq4tpB9PXBm27Yd3f:sWSOFW8MCMtpB9PXP7MP
- TLSH T14A0733287BA500E6FCD9937978E0D066A2D47E9A0BA4C69753F54A500D732C6FFB2313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory