General
- Target 2026-07-30_c35f828e14df30572268d4eecfb1eb7b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 42.8MB
- Sample260730-dfry3abq4t
- SHA256 aa2651cf2d3504406702f17013ed0cb761137f6e5dcc192a3fa0d9a6f85e293b
- MD5 c35f828e14df30572268d4eecfb1eb7b
- SHA1 31226ef75ff473ec8122393fe5c10b0006feab04
- SHA512 199f50de6567d02ea1a25e6ad2a3d15dcc745e06846739925d743848e2c73a9f6b4d91893c36539c68ea14ce3b0b531bcc50200cb7bbefbd3307f1d25ceccdc9
- SSDEEP 393216:mqnqjUEtQevvqc2W1cpV2XI32FqnqjUEr:mqnqAE8c23pV2X+aqnqAEr
- TLSH T1A3A75A52B6E443E2D366D034C9B28272EB717C0E1BB192BB1175F69E1E376D06E39321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_c35f828e14df30572268d4eecfb1eb7b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_c35f828e14df30572268d4eecfb1eb7b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_c35f828e14df30572268d4eecfb1eb7b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 42.8MB
- SHA256 aa2651cf2d3504406702f17013ed0cb761137f6e5dcc192a3fa0d9a6f85e293b
- MD5 c35f828e14df30572268d4eecfb1eb7b
- SHA1 31226ef75ff473ec8122393fe5c10b0006feab04
- SHA512 199f50de6567d02ea1a25e6ad2a3d15dcc745e06846739925d743848e2c73a9f6b4d91893c36539c68ea14ce3b0b531bcc50200cb7bbefbd3307f1d25ceccdc9
- SSDEEP 393216:mqnqjUEtQevvqc2W1cpV2XI32FqnqjUEr:mqnqAE8c23pV2X+aqnqAEr
- TLSH T1A3A75A52B6E443E2D366D034C9B28272EB717C0E1BB192BB1175F69E1E376D06E39321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application