General
- Target 2026-07-31_29313dd8814fbd56d56cf5ef7ea5c799_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 25.2MB
- Sample260801-aehr8attgy
- SHA256 691b0725f9cd5dcf0529fe3b81cb8a5c36bc904535247f2ce95fa225f441dfdd
- MD5 29313dd8814fbd56d56cf5ef7ea5c799
- SHA1 32698cbae35fbc3570b75ecf5944956fc8c644d1
- SHA512 e6e2628317774fe19be39145ca2d2f0bf9f4b50ac2c4f4714d27724f8775bf2bbed028a0ae1376b74ffa99ad5fd688daaf728a6e66b2d8aca237e8344094df47
- SSDEEP 196608:l8Vb618U6D8Vb618U6a2VhF8Vb618U6D8Vb618U6a2VhKWqQI0pyLKz7:2cpcveccpcveYWqQjpUKv
- TLSH T1E6478C13F6A540E5D06AD57087669332EAB2BC524B31A7CF4350F6192F33AD06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_29313dd8814fbd56d56cf5ef7ea5c799_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_29313dd8814fbd56d56cf5ef7ea5c799_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_29313dd8814fbd56d56cf5ef7ea5c799_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 25.2MB
- SHA256 691b0725f9cd5dcf0529fe3b81cb8a5c36bc904535247f2ce95fa225f441dfdd
- MD5 29313dd8814fbd56d56cf5ef7ea5c799
- SHA1 32698cbae35fbc3570b75ecf5944956fc8c644d1
- SHA512 e6e2628317774fe19be39145ca2d2f0bf9f4b50ac2c4f4714d27724f8775bf2bbed028a0ae1376b74ffa99ad5fd688daaf728a6e66b2d8aca237e8344094df47
- SSDEEP 196608:l8Vb618U6D8Vb618U6a2VhF8Vb618U6D8Vb618U6a2VhKWqQI0pyLKz7:2cpcveccpcveYWqQjpUKv
- TLSH T1E6478C13F6A540E5D06AD57087669332EAB2BC524B31A7CF4350F6192F33AD06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry