General
- Target 2026-07-30_e070fc857a4bf2cf802f8c5762b4b681_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 38.0MB
- Sample260730-bgrnkswemd
- SHA256 8867101545ea72b341432c262ec5bff0f730d00b35db573111f5663a5d2f6786
- MD5 e070fc857a4bf2cf802f8c5762b4b681
- SHA1 ee703ab9886ef505b68241766d57ac3feff170da
- SHA512 1c2d839daa6cdf3f7dca673407345810e9f8b74641904048f24d0df7cf78abca313b8b8686b82d05c82b75797f723ee294ec7956c1ceabd76073f7402236f6c5
- SSDEEP 196608:Jw/h1+vKmd0hw/h1+vKmd02UEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHKwJ:mqnqjUEtQevvqc2W1cpV2XI32FqnM
- TLSH T116977C52B6E443E2D3A6D034C9B18276EB717C0E1BB192BB1175F29E1E376D06E39321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_e070fc857a4bf2cf802f8c5762b4b681_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_e070fc857a4bf2cf802f8c5762b4b681_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_e070fc857a4bf2cf802f8c5762b4b681_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 38.0MB
- SHA256 8867101545ea72b341432c262ec5bff0f730d00b35db573111f5663a5d2f6786
- MD5 e070fc857a4bf2cf802f8c5762b4b681
- SHA1 ee703ab9886ef505b68241766d57ac3feff170da
- SHA512 1c2d839daa6cdf3f7dca673407345810e9f8b74641904048f24d0df7cf78abca313b8b8686b82d05c82b75797f723ee294ec7956c1ceabd76073f7402236f6c5
- SSDEEP 196608:Jw/h1+vKmd0hw/h1+vKmd02UEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHKwJ:mqnqjUEtQevvqc2W1cpV2XI32FqnM
- TLSH T116977C52B6E443E2D3A6D034C9B18276EB717C0E1BB192BB1175F29E1E376D06E39321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application