General
- Target 2026-07-27_1ef82d1399d1498ddb69dd16bf0d660f_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 11.4MB
- Sample260727-v7cf5ayvc1
- SHA256 b89b549b5153e962d1ad989e32954920e010155dcf26ed733f13783ec2e527a2
- MD5 1ef82d1399d1498ddb69dd16bf0d660f
- SHA1 629ac73c380a05cc81b8dbaffcd82782337b928c
- SHA512 d8ecf6aa96a988d856df70bbb0972b1d6679e51cf0dd4bdc5e83e871d8d184df5c3656fb9e3c3d7da895993e9700aa0dda703a57565d7b373566e384eeb175ba
- SSDEEP 98304:Su5x6M1uWQLtWa7qNu5x6M1uWQLtWa7q5LapIFoq2Vjnm:JSWRSSWR5cIFGn
- TLSH T14CC65A23B1E200A9C05DD135CB469732E6E27C658FF0A3EB5251B6991F33AD07B3971A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_1ef82d1399d1498ddb69dd16bf0d660f_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_1ef82d1399d1498ddb69dd16bf0d660f_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_1ef82d1399d1498ddb69dd16bf0d660f_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 11.4MB
- SHA256 b89b549b5153e962d1ad989e32954920e010155dcf26ed733f13783ec2e527a2
- MD5 1ef82d1399d1498ddb69dd16bf0d660f
- SHA1 629ac73c380a05cc81b8dbaffcd82782337b928c
- SHA512 d8ecf6aa96a988d856df70bbb0972b1d6679e51cf0dd4bdc5e83e871d8d184df5c3656fb9e3c3d7da895993e9700aa0dda703a57565d7b373566e384eeb175ba
- SSDEEP 98304:Su5x6M1uWQLtWa7qNu5x6M1uWQLtWa7q5LapIFoq2Vjnm:JSWRSSWR5cIFGn
- TLSH T14CC65A23B1E200A9C05DD135CB469732E6E27C658FF0A3EB5251B6991F33AD07B3971A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry