General
- Target 2026-07-24_3465855e8434c9d5ffd44d516438051a_cobalt-strike_elex_glassworm_icedid_njrat_rhadamanthys_stealc_vidar
- Size 1.6MB
- Sample260724-wxsk2aaa58
- SHA256 c69e46e0b02fd5067b7a89b459284c0957145fe29b7bfb3244eedd47642923f0
- MD5 3465855e8434c9d5ffd44d516438051a
- SHA1 b52b61be24331311661bfb4e392d89f8f549f057
- SHA512 6d213433187cf07957a19155c489d33bee1ed10b25a65da13aa7d05735beeeced1217ec8f7abd70765c393cb37733e418088b4d3d39d2b416846bd1f9d03e909
- SSDEEP 24576:wVRsAXgJ1Dz+zdo4fg5CFWYii0zRZw2mX0M/wnFKz+zAs/:wVRsAXe5C5o4fAtYi3tZQtYQCL
- TLSH T18F858D6AA25800F9D1779139CA524A4FE3F27C19076097DF23A0B6A72F376E41E7E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_3465855e8434c9d5ffd44d516438051a_cobalt-strike_elex_glassworm_icedid_njrat_rhadamanthys_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_3465855e8434c9d5ffd44d516438051a_cobalt-strike_elex_glassworm_icedid_njrat_rhadamanthys_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_3465855e8434c9d5ffd44d516438051a_cobalt-strike_elex_glassworm_icedid_njrat_rhadamanthys_stealc_vidar
- Size 1.6MB
- SHA256 c69e46e0b02fd5067b7a89b459284c0957145fe29b7bfb3244eedd47642923f0
- MD5 3465855e8434c9d5ffd44d516438051a
- SHA1 b52b61be24331311661bfb4e392d89f8f549f057
- SHA512 6d213433187cf07957a19155c489d33bee1ed10b25a65da13aa7d05735beeeced1217ec8f7abd70765c393cb37733e418088b4d3d39d2b416846bd1f9d03e909
- SSDEEP 24576:wVRsAXgJ1Dz+zdo4fg5CFWYii0zRZw2mX0M/wnFKz+zAs/:wVRsAXe5C5o4fAtYi3tZQtYQCL
- TLSH T18F858D6AA25800F9D1779139CA524A4FE3F27C19076097DF23A0B6A72F376E41E7E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory