General
- Target 2026-07-31_2c68c9c576ee3a86da523174bc6f03e5_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 29.2MB
- Sample260801-ady3tatte1
- SHA256 5d18ade277126b11e3d3c393ce673e806b9370e72b41258e7e1938a08721b51c
- MD5 2c68c9c576ee3a86da523174bc6f03e5
- SHA1 8268f0b1a7ff0c674d4060f034585ab0583e8754
- SHA512 2dcf910038cead864b2857f51a6605612c27300a474785bbf27051be78c63f9f09337cea1bf25d0f655663ac8947b0cee332f01176035096d7deb7f644713273
- SSDEEP 196608:l8Vb618U68Vb618US18e8Vb618U68Vb618US18m8Vb618U68Vb618US18e8Vb611:2cDcyGcDcyWcDcyGcDcyKWqQjp3
- TLSH T135678D17F69540F9E06AD5748A669332EA72BC520B31A7CF0390F6191F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_2c68c9c576ee3a86da523174bc6f03e5_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_2c68c9c576ee3a86da523174bc6f03e5_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_2c68c9c576ee3a86da523174bc6f03e5_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 29.2MB
- SHA256 5d18ade277126b11e3d3c393ce673e806b9370e72b41258e7e1938a08721b51c
- MD5 2c68c9c576ee3a86da523174bc6f03e5
- SHA1 8268f0b1a7ff0c674d4060f034585ab0583e8754
- SHA512 2dcf910038cead864b2857f51a6605612c27300a474785bbf27051be78c63f9f09337cea1bf25d0f655663ac8947b0cee332f01176035096d7deb7f644713273
- SSDEEP 196608:l8Vb618U68Vb618US18e8Vb618U68Vb618US18m8Vb618U68Vb618US18e8Vb611:2cDcyGcDcyWcDcyGcDcyKWqQjp3
- TLSH T135678D17F69540F9E06AD5748A669332EA72BC520B31A7CF0390F6191F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry