General
- Target 2026-07-31_a3c39fb79eff929a4a4cd2f72f5d21c8_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.4MB
- Sample260731-3fjecsap2s
- SHA256 526b7b9549a938b4de0d1d0fa0c10a22d2ccea288768eb6114106961e1694b60
- MD5 a3c39fb79eff929a4a4cd2f72f5d21c8
- SHA1 f23f1f20a261183840ae8b52dc638dac3c05132b
- SHA512 56cb98e487841d61882d807109a5efc1f6cfbb13af3b4513bb76bc0f302934e7ac1f9c10ac0f2b2c13aa4a18a031c5cb4c1b9298346662a67949cb94fafe026c
- SSDEEP 98304:t0nAAYEp9hDQA91pH2WpjHrgBFFu416AWvc:SNlQmHpn6F44IAWvc
- TLSH T1327639A562A7A0ECE46FD075CB2A8771E6713C278071930B16BCFA563F736142D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_a3c39fb79eff929a4a4cd2f72f5d21c8_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_a3c39fb79eff929a4a4cd2f72f5d21c8_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.4MB
- SHA256 526b7b9549a938b4de0d1d0fa0c10a22d2ccea288768eb6114106961e1694b60
- MD5 a3c39fb79eff929a4a4cd2f72f5d21c8
- SHA1 f23f1f20a261183840ae8b52dc638dac3c05132b
- SHA512 56cb98e487841d61882d807109a5efc1f6cfbb13af3b4513bb76bc0f302934e7ac1f9c10ac0f2b2c13aa4a18a031c5cb4c1b9298346662a67949cb94fafe026c
- SSDEEP 98304:t0nAAYEp9hDQA91pH2WpjHrgBFFu416AWvc:SNlQmHpn6F44IAWvc
- TLSH T1327639A562A7A0ECE46FD075CB2A8771E6713C278071930B16BCFA563F736142D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE