General
- Target 2026-07-27_c5c39ead9147f7e4170a2393de60a69a_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 17.2MB
- Sample260727-sxtljswwcv
- SHA256 bf3f47eb17f78a8408a78904548143448edec86949c1c562e443b0f90ebdc678
- MD5 c5c39ead9147f7e4170a2393de60a69a
- SHA1 f495ab07ca689401a472ebff34a49e076fbae791
- SHA512 c662ed8ea05dd50d5faa4b52265682ee01ed093a2d1d301aba397a0c560532316c170827f60b1d4fd33d32e5f1d543082d6b95056fc53aad0b6bcaa8eee72dc0
- SSDEEP 196608:l8Vb618L8Vb6H8Vb618L8Vb6yJ8Vb618L8Vb6H8Vb618L8Vb6yk:2c7tc7d6c7tc7dk
- TLSH T12A07AE17F69540F5D17A993046AA9332EB72B8120B319BCF93A4C7191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_c5c39ead9147f7e4170a2393de60a69a_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_c5c39ead9147f7e4170a2393de60a69a_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_c5c39ead9147f7e4170a2393de60a69a_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 17.2MB
- SHA256 bf3f47eb17f78a8408a78904548143448edec86949c1c562e443b0f90ebdc678
- MD5 c5c39ead9147f7e4170a2393de60a69a
- SHA1 f495ab07ca689401a472ebff34a49e076fbae791
- SHA512 c662ed8ea05dd50d5faa4b52265682ee01ed093a2d1d301aba397a0c560532316c170827f60b1d4fd33d32e5f1d543082d6b95056fc53aad0b6bcaa8eee72dc0
- SSDEEP 196608:l8Vb618L8Vb6H8Vb618L8Vb6yJ8Vb618L8Vb6H8Vb618L8Vb6yk:2c7tc7d6c7tc7dk
- TLSH T12A07AE17F69540F5D17A993046AA9332EB72B8120B319BCF93A4C7191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry