General
- Target 2026-07-27_8872b20a6dbc0aa223ee8931c7ff40c7_cobalt-strike_elex_emotet_glassworm_icedid_remcos_stealc_vidar
- Size 35.7MB
- Sample260727-v2fxcsaq41
- SHA256 61a816c7fc2caa9d7f110d775aca67de36bd6739ec5d871af2f090bca05a0623
- MD5 8872b20a6dbc0aa223ee8931c7ff40c7
- SHA1 7d4a17d15b3b12c55385e321cdda2770b1d798ae
- SHA512 af4aff6946f385b9625876db80069fdb8787811ab4e55960d5a990bd778d6190c8ea5778c9ec0c0ae5410388240d6216ebbbb013692fbf6711eec19fa116833d
- SSDEEP 196608:ndPxdPidPxdPGUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:DUEtQevvqc2W1cpV2XI32i
- TLSH T10C877C52BAE483F2D36A993485B582B1FB71BC1E1F31977B9278F21E1F331905D25222
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_8872b20a6dbc0aa223ee8931c7ff40c7_cobalt-strike_elex_emotet_glassworm_icedid_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_8872b20a6dbc0aa223ee8931c7ff40c7_cobalt-strike_elex_emotet_glassworm_icedid_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_8872b20a6dbc0aa223ee8931c7ff40c7_cobalt-strike_elex_emotet_glassworm_icedid_remcos_stealc_vidar
- Size 35.7MB
- SHA256 61a816c7fc2caa9d7f110d775aca67de36bd6739ec5d871af2f090bca05a0623
- MD5 8872b20a6dbc0aa223ee8931c7ff40c7
- SHA1 7d4a17d15b3b12c55385e321cdda2770b1d798ae
- SHA512 af4aff6946f385b9625876db80069fdb8787811ab4e55960d5a990bd778d6190c8ea5778c9ec0c0ae5410388240d6216ebbbb013692fbf6711eec19fa116833d
- SSDEEP 196608:ndPxdPidPxdPGUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:DUEtQevvqc2W1cpV2XI32i
- TLSH T10C877C52BAE483F2D36A993485B582B1FB71BC1E1F31977B9278F21E1F331905D25222
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application