General
- Target 2026-07-27_057583bf5f5663d3fadc417e400c327b_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 17.3MB
- Sample260727-qtcgratwcv
- SHA256 52603e6f3923b7fcbd002054d40ac65c13b8d4d78a180051b5db6df40a6bdc5e
- MD5 057583bf5f5663d3fadc417e400c327b
- SHA1 60a4f267e589a8e0355b25bd119bc28604fc901f
- SHA512 638ef9491d31104349f5402731af4bf7597d3700ea4d4e4beba3fbc2e5a71f476e09df3017a0c6326dfd8993b8ba16ae0213ab92d3f742f994c12979395b59d6
- SSDEEP 196608:l8Vb618L8Vb6H8Vb618L8Vb6yJ8Vb618L8Vb6H8Vb618L8Vb6y2:2c7tc7d6c7tc7d2
- TLSH T199079E17F69540F5D17A993086AA9332EB73B8120B319BCF53A4C6191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_057583bf5f5663d3fadc417e400c327b_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_057583bf5f5663d3fadc417e400c327b_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_057583bf5f5663d3fadc417e400c327b_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 17.3MB
- SHA256 52603e6f3923b7fcbd002054d40ac65c13b8d4d78a180051b5db6df40a6bdc5e
- MD5 057583bf5f5663d3fadc417e400c327b
- SHA1 60a4f267e589a8e0355b25bd119bc28604fc901f
- SHA512 638ef9491d31104349f5402731af4bf7597d3700ea4d4e4beba3fbc2e5a71f476e09df3017a0c6326dfd8993b8ba16ae0213ab92d3f742f994c12979395b59d6
- SSDEEP 196608:l8Vb618L8Vb6H8Vb618L8Vb6yJ8Vb618L8Vb6H8Vb618L8Vb6y2:2c7tc7d6c7tc7d2
- TLSH T199079E17F69540F5D17A993086AA9332EB73B8120B319BCF53A4C6191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application