General
- Target 2026-08-01_cb669a29757aefe995e70b53e4b1d18c_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 38.9MB
- Sample260801-3rxfcshq81
- SHA256 798f35180dae24ecce916a1d8a5c030ebd2f9f759091d9212cdd04dbba9d3414
- MD5 cb669a29757aefe995e70b53e4b1d18c
- SHA1 6726390c4fe482b7acd84fe658dbf1e29b3c3052
- SHA512 48ec3d6982aba706a460f9ff37a1588299194eaf8bc07ca2f237a7d7ccfcb4295577260e67bd6d1836c8db43a1ab7a53d460d18fb1492deaa6477a3051d63537
- SSDEEP 786432:IkLDkLxNkLDkLxsfjpYkLDkLxNkLDkLxsfjpU:23sfjU3sfjy
- TLSH T188979F03B7E441A9E1BAC63496768632EB72BC455B31D7DF1294B61E1E33BC09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_cb669a29757aefe995e70b53e4b1d18c_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_cb669a29757aefe995e70b53e4b1d18c_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_cb669a29757aefe995e70b53e4b1d18c_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 38.9MB
- SHA256 798f35180dae24ecce916a1d8a5c030ebd2f9f759091d9212cdd04dbba9d3414
- MD5 cb669a29757aefe995e70b53e4b1d18c
- SHA1 6726390c4fe482b7acd84fe658dbf1e29b3c3052
- SHA512 48ec3d6982aba706a460f9ff37a1588299194eaf8bc07ca2f237a7d7ccfcb4295577260e67bd6d1836c8db43a1ab7a53d460d18fb1492deaa6477a3051d63537
- SSDEEP 786432:IkLDkLxNkLDkLxsfjpYkLDkLxNkLDkLxsfjpU:23sfjU3sfjy
- TLSH T188979F03B7E441A9E1BAC63496768632EB72BC455B31D7DF1294B61E1E33BC09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry