General
- Target 2026-08-01_b5d127c8f17f25e3d02a3fba60195020_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 13.7MB
- Sample260801-p81bpabl5y
- SHA256 f5697b5533036084f1d2ee1857fa2939493e86a496c04dd0f95f0a484faddbfd
- MD5 b5d127c8f17f25e3d02a3fba60195020
- SHA1 83d89492e3e2c4c0b9a5c2aef3b3e05aadd30828
- SHA512 3bd2d58843c53158f2de97b1271a7ce2c6e303364e0ff35d255a446c7ec050996bbfcdb2d9fb64f4698116c3b1df452a280f712a1e01c2640aba00c6c4a42f3c
- SSDEEP 196608:l8Vb618U68Vb618US18e8Vb618U68Vb618US183Kz:2cDcyGcDcy0K
- TLSH T129E68C17B6A540F9D06ED5348B569232EAB2BC620B7097CF4390F6191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_b5d127c8f17f25e3d02a3fba60195020_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_b5d127c8f17f25e3d02a3fba60195020_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_b5d127c8f17f25e3d02a3fba60195020_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 13.7MB
- SHA256 f5697b5533036084f1d2ee1857fa2939493e86a496c04dd0f95f0a484faddbfd
- MD5 b5d127c8f17f25e3d02a3fba60195020
- SHA1 83d89492e3e2c4c0b9a5c2aef3b3e05aadd30828
- SHA512 3bd2d58843c53158f2de97b1271a7ce2c6e303364e0ff35d255a446c7ec050996bbfcdb2d9fb64f4698116c3b1df452a280f712a1e01c2640aba00c6c4a42f3c
- SSDEEP 196608:l8Vb618U68Vb618US18e8Vb618U68Vb618US183Kz:2cDcyGcDcy0K
- TLSH T129E68C17B6A540F9D06ED5348B569232EAB2BC620B7097CF4390F6191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry