General
- Target 2026-07-27_9edf5d51ac6150c1b90f50295cd39fee_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 17.2MB
- Sample260727-rp4acavbme
- SHA256 6f343e90b1961dc334631de6e32c55c930d349387d633ff27724851d328a72e7
- MD5 9edf5d51ac6150c1b90f50295cd39fee
- SHA1 2091cd62677abfbf0f0d635271650ec0eee3f365
- SHA512 db5f6898efa5eeabcb7cef5b060df6051d159a8bdeeee7fc492e91d58502eafdd18529c8364ced111feb503f9f8a1d6f7167c0a8de8bb055a565446091d7b2e7
- SSDEEP 196608:l8Vb618L8Vb6H8Vb618L8Vb6yJ8Vb618L8Vb6H8Vb618L8Vb6yO:2c7tc7d6c7tc7dO
- TLSH T17707AE17F69540F5D17A993046AA9332EB72B8120B319BCF93A4C7191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_9edf5d51ac6150c1b90f50295cd39fee_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_9edf5d51ac6150c1b90f50295cd39fee_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_9edf5d51ac6150c1b90f50295cd39fee_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 17.2MB
- SHA256 6f343e90b1961dc334631de6e32c55c930d349387d633ff27724851d328a72e7
- MD5 9edf5d51ac6150c1b90f50295cd39fee
- SHA1 2091cd62677abfbf0f0d635271650ec0eee3f365
- SHA512 db5f6898efa5eeabcb7cef5b060df6051d159a8bdeeee7fc492e91d58502eafdd18529c8364ced111feb503f9f8a1d6f7167c0a8de8bb055a565446091d7b2e7
- SSDEEP 196608:l8Vb618L8Vb6H8Vb618L8Vb6yJ8Vb618L8Vb6H8Vb618L8Vb6yO:2c7tc7d6c7tc7dO
- TLSH T17707AE17F69540F5D17A993046AA9332EB72B8120B319BCF93A4C7191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry