General
- Target 2026-07-30_1a448fc2f294ef04f8b0ef3a108f2308_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 47.4MB
- Sample260730-efd8msygke
- SHA256 2f8779cbb328fed32ea3564d741a73afee3a5a2568ce94f9bbd8965b2720627c
- MD5 1a448fc2f294ef04f8b0ef3a108f2308
- SHA1 128a872208ea19e18b09d9304ea6520b911d94f4
- SHA512 6f7817f7e7daf2c776fdba75b6316c65ae980503e6841b74dce126a289bc9d37f977d1b8e0d7312b166542ed88dac09532d48abae56887c420b3f1822de1ab7d
- SSDEEP 393216:2cpcveccpcveYWqQjpylucpcveccpcveYWqQjL:t6mX6mffjpyll6mX6mffjL
- TLSH T13DB78D03F69540F9D06AD574865A9232EA72BC460B31A7DF0390F7592F33AD06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_1a448fc2f294ef04f8b0ef3a108f2308_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_1a448fc2f294ef04f8b0ef3a108f2308_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_1a448fc2f294ef04f8b0ef3a108f2308_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 47.4MB
- SHA256 2f8779cbb328fed32ea3564d741a73afee3a5a2568ce94f9bbd8965b2720627c
- MD5 1a448fc2f294ef04f8b0ef3a108f2308
- SHA1 128a872208ea19e18b09d9304ea6520b911d94f4
- SHA512 6f7817f7e7daf2c776fdba75b6316c65ae980503e6841b74dce126a289bc9d37f977d1b8e0d7312b166542ed88dac09532d48abae56887c420b3f1822de1ab7d
- SSDEEP 393216:2cpcveccpcveYWqQjpylucpcveccpcveYWqQjL:t6mX6mffjpyll6mX6mffjL
- TLSH T13DB78D03F69540F9D06AD574865A9232EA72BC460B31A7DF0390F7592F33AD06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application