General
- Target 2026-07-28_81853335bf8af161921cf4f834672fa0_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 3.5MB
- Sample260728-ges2hsbr3z
- SHA256 0c19778a81c08642387ebba39a4a643360a17fd6fb9dff25cf7b927a41b07ac8
- MD5 81853335bf8af161921cf4f834672fa0
- SHA1 33ddb30d273d9da8919c7f448ad663d2fc15eae0
- SHA512 5efadd85aed34ef7c75ddbfadf383d101619e2f730775098558594d4844a080b030b1774214b8c9bf022746fd45f2fd34f8245890a1caa8ba84af47e40d0ab1a
- SSDEEP 49152:nj9LxcO4Q5Yb0JsSfE40N54/7t0iDHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyp:njBxcO4EYIOSfE4Ai/oAaldmdmnpp
- TLSH T125F56A13B29544E9D15AC074CE4A9236D721BC5D4BF266FB3280FADA2E73AD03B39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_81853335bf8af161921cf4f834672fa0_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_81853335bf8af161921cf4f834672fa0_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_81853335bf8af161921cf4f834672fa0_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 3.5MB
- SHA256 0c19778a81c08642387ebba39a4a643360a17fd6fb9dff25cf7b927a41b07ac8
- MD5 81853335bf8af161921cf4f834672fa0
- SHA1 33ddb30d273d9da8919c7f448ad663d2fc15eae0
- SHA512 5efadd85aed34ef7c75ddbfadf383d101619e2f730775098558594d4844a080b030b1774214b8c9bf022746fd45f2fd34f8245890a1caa8ba84af47e40d0ab1a
- SSDEEP 49152:nj9LxcO4Q5Yb0JsSfE40N54/7t0iDHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyp:njBxcO4EYIOSfE4Ai/oAaldmdmnpp
- TLSH T125F56A13B29544E9D15AC074CE4A9236D721BC5D4BF266FB3280FADA2E73AD03B39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory