General
- Target 2026-07-27_7de0a2e7f423b0e902640ffc38805664_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 13.6MB
- Sample260727-s5b2gawdld
- SHA256 122404144978954dc2ceafe0920dad6c21e17d639ac260ec42d9784d11e28b93
- MD5 7de0a2e7f423b0e902640ffc38805664
- SHA1 f9ad501e447799c3462bd4868ba9b8b3295f86cc
- SHA512 074243a6c14d11f445fd98811446e79284c1917043f9f951f24a189cfdecfc9af885083a1187b56c749ec03c3cc68d66856e8048cf8e8f1126cf65cb8b70e71a
- SSDEEP 98304:Uu5x6M1Ku5x6M1wu5x6M1uu5x6M1Ku5x6M1wu5x6M1xu5x6M1Ku5x6M1wu5x6M1G:ndPxdPidPxdPtKz
- TLSH T107E66B27F99184F2C66D18304B6AA731AB72AD214B51C7C7D3A4F62D6F331C06D3662B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_7de0a2e7f423b0e902640ffc38805664_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_7de0a2e7f423b0e902640ffc38805664_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_7de0a2e7f423b0e902640ffc38805664_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 13.6MB
- SHA256 122404144978954dc2ceafe0920dad6c21e17d639ac260ec42d9784d11e28b93
- MD5 7de0a2e7f423b0e902640ffc38805664
- SHA1 f9ad501e447799c3462bd4868ba9b8b3295f86cc
- SHA512 074243a6c14d11f445fd98811446e79284c1917043f9f951f24a189cfdecfc9af885083a1187b56c749ec03c3cc68d66856e8048cf8e8f1126cf65cb8b70e71a
- SSDEEP 98304:Uu5x6M1Ku5x6M1wu5x6M1uu5x6M1Ku5x6M1wu5x6M1xu5x6M1Ku5x6M1wu5x6M1G:ndPxdPidPxdPtKz
- TLSH T107E66B27F99184F2C66D18304B6AA731AB72AD214B51C7C7D3A4F62D6F331C06D3662B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry