General
- Target 2026-07-30_90b938f04e04d4d30000a0c9fbc08bd2_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 6.7MB
- Sample260730-vwkclawye1
- SHA256 522d09fdb6a4b0e5f35a44d1e30ca2866a26eb1e2bd12811f4938c61327e380c
- MD5 90b938f04e04d4d30000a0c9fbc08bd2
- SHA1 ea3be5eecc79f1e8150f78ab29988010aa850b55
- SHA512 2ec0fc8fa99123517963faa3f8c0f0feb6d76bcc34fd1a0d8bd894c8d62447f1e30099298670095b27914a62e5170ae294ebfee2754c0f4ad238c7b8f11e9590
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb4e5x6c1QVb6nUmb:l8Vb618U68Vbb8Vb61b
- TLSH T1A566AE17FA9444F5D17A98304AA69331EB72BC110B31D7CB93A4F6191F336D0AE3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_90b938f04e04d4d30000a0c9fbc08bd2_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_90b938f04e04d4d30000a0c9fbc08bd2_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_90b938f04e04d4d30000a0c9fbc08bd2_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 6.7MB
- SHA256 522d09fdb6a4b0e5f35a44d1e30ca2866a26eb1e2bd12811f4938c61327e380c
- MD5 90b938f04e04d4d30000a0c9fbc08bd2
- SHA1 ea3be5eecc79f1e8150f78ab29988010aa850b55
- SHA512 2ec0fc8fa99123517963faa3f8c0f0feb6d76bcc34fd1a0d8bd894c8d62447f1e30099298670095b27914a62e5170ae294ebfee2754c0f4ad238c7b8f11e9590
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb4e5x6c1QVb6nUmb:l8Vb618U68Vbb8Vb61b
- TLSH T1A566AE17FA9444F5D17A98304AA69331EB72BC110B31D7CB93A4F6191F336D0AE3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry