General
- Target 2026-07-30_f934d9be9a9fdbc10843600991c90eff_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar
- Size 14.6MB
- Sample260730-xpgn8sea98
- SHA256 007f460b73fa0e7c46cd18c78f46fdbd1a47eaba8786f4641a2341ec23c52ac0
- MD5 f934d9be9a9fdbc10843600991c90eff
- SHA1 cb0415d1d6d97cf23632f69969bb247705dae355
- SHA512 23eb46d9adb2f7dc97f76b4aa42d6cb729bf4aa1bf1945b5a1118e162f60b4a973f67b27912c793bc23086c041f3fe04098ea530d7cc6381b4e549b7c58be36b
- SSDEEP 393216:Q+H8XMCHWUjqVg74wQBPm9BpXqEwAcmI5yUVJKIZ2Nu:OXMb8ODwQBPm92nSUVcIZwu
- TLSH T1B8F63327B55026F6ECFA807BD85BC47BB7321D7E0F51DC4B52E883262833552A936227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_f934d9be9a9fdbc10843600991c90eff_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_f934d9be9a9fdbc10843600991c90eff_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_f934d9be9a9fdbc10843600991c90eff_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar
- Size 14.6MB
- SHA256 007f460b73fa0e7c46cd18c78f46fdbd1a47eaba8786f4641a2341ec23c52ac0
- MD5 f934d9be9a9fdbc10843600991c90eff
- SHA1 cb0415d1d6d97cf23632f69969bb247705dae355
- SHA512 23eb46d9adb2f7dc97f76b4aa42d6cb729bf4aa1bf1945b5a1118e162f60b4a973f67b27912c793bc23086c041f3fe04098ea530d7cc6381b4e549b7c58be36b
- SSDEEP 393216:Q+H8XMCHWUjqVg74wQBPm9BpXqEwAcmI5yUVJKIZ2Nu:OXMb8ODwQBPm92nSUVcIZwu
- TLSH T1B8F63327B55026F6ECFA807BD85BC47BB7321D7E0F51DC4B52E883262833552A936227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory