General
- Target 2026-07-30_24a27b3a6c1caa444905158d0667d5e4_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 15.5MB
- Sample260730-wnfj4sxvbw
- SHA256 64079510e00a822bd8769ea6c54bedaa9913257e72dc2516f02ba3de8bb2e722
- MD5 24a27b3a6c1caa444905158d0667d5e4
- SHA1 c17461fdc7ef2d4f4157428b57a5a5d5daa668ba
- SHA512 20886fd68864d56a67e5f1f0536c45d2c326195c1dbd13647e4bc8ef6f9d809a454013e3cdd64127e8e352a2129645da034e97884dac5d1bb87b8afc24257d14
- SSDEEP 196608:l8Vb618U68Vbb8Vb61x8Vb618U68Vbb8Vb61s2Vh:2cD2cCcD2cse
- TLSH T167F69D17F69540F5D16AD83086AA9332EA72BC110B3197CF43A4F6592F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_24a27b3a6c1caa444905158d0667d5e4_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_24a27b3a6c1caa444905158d0667d5e4_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_24a27b3a6c1caa444905158d0667d5e4_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 15.5MB
- SHA256 64079510e00a822bd8769ea6c54bedaa9913257e72dc2516f02ba3de8bb2e722
- MD5 24a27b3a6c1caa444905158d0667d5e4
- SHA1 c17461fdc7ef2d4f4157428b57a5a5d5daa668ba
- SHA512 20886fd68864d56a67e5f1f0536c45d2c326195c1dbd13647e4bc8ef6f9d809a454013e3cdd64127e8e352a2129645da034e97884dac5d1bb87b8afc24257d14
- SSDEEP 196608:l8Vb618U68Vbb8Vb61x8Vb618U68Vbb8Vb61s2Vh:2cD2cCcD2cse
- TLSH T167F69D17F69540F5D16AD83086AA9332EA72BC110B3197CF43A4F6592F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry