General
- Target 2026-08-01_f85c015fc85f05b621a87f8457fce612_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 63.9MB
- Sample260801-3c6eqazakd
- SHA256 c612204baa3bfb3ae22409d38910366854afeb2c56d290b51ba2b552324fd4fe
- MD5 f85c015fc85f05b621a87f8457fce612
- SHA1 dc5c5083b3228ba09965587e4e2a997ec20d286b
- SHA512 af059c4f803c7f2d768fc4d5a0379de5da6391e18b04729b9f2c294f5af6f870b99814050350cb5a2e592c587fa206a7cf432db7af56291d63ae17b321d585e4
- SSDEEP 786432:tYRY8YRYifjp9YRY8YRYifjpRYRY8YRYq:tYRY8YRYifj3YRY8YRYifjfYRY8YRYq
- TLSH T1C4E77B17E6A540F4E16E95348BA69232FA73BC120B7097CF43A4D62D1F336D06E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_f85c015fc85f05b621a87f8457fce612_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_f85c015fc85f05b621a87f8457fce612_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_f85c015fc85f05b621a87f8457fce612_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 63.9MB
- SHA256 c612204baa3bfb3ae22409d38910366854afeb2c56d290b51ba2b552324fd4fe
- MD5 f85c015fc85f05b621a87f8457fce612
- SHA1 dc5c5083b3228ba09965587e4e2a997ec20d286b
- SHA512 af059c4f803c7f2d768fc4d5a0379de5da6391e18b04729b9f2c294f5af6f870b99814050350cb5a2e592c587fa206a7cf432db7af56291d63ae17b321d585e4
- SSDEEP 786432:tYRY8YRYifjp9YRY8YRYifjpRYRY8YRYq:tYRY8YRYifj3YRY8YRYifjfYRY8YRYq
- TLSH T1C4E77B17E6A540F4E16E95348BA69232FA73BC120B7097CF43A4D62D1F336D06E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry