General
- Target 2026-08-02_c13577c06389d98fa4c4d80ca58e6907_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 34.0MB
- Sample260802-3rallahj3s
- SHA256 a7d70016924f6996531d2347c9e4f97b566e190df920b8a4455644250d730ed5
- MD5 c13577c06389d98fa4c4d80ca58e6907
- SHA1 c0c4bd6400717c8e61d908d71de9949fce775730
- SHA512 3c507a8e1237f683a8cf3010db4cde600ff0dd351ab51bf99c802681fb357c8892884db44dff08b24720a8f09ef51189c2e7ae8e95c2eb2db534d7f66f26154a
- SSDEEP 393216:IkLDkLSGNkLDkLSGrovkLDkLSGNkLDkLSGro/D:IkLDkLxNkLDkLxEvkLDkLxNkLDkLxEb
- TLSH T151779E0677E441B9E1BA863496768632E772BC460B30D7DF5694B61E2E33BC09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_c13577c06389d98fa4c4d80ca58e6907_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_c13577c06389d98fa4c4d80ca58e6907_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_c13577c06389d98fa4c4d80ca58e6907_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 34.0MB
- SHA256 a7d70016924f6996531d2347c9e4f97b566e190df920b8a4455644250d730ed5
- MD5 c13577c06389d98fa4c4d80ca58e6907
- SHA1 c0c4bd6400717c8e61d908d71de9949fce775730
- SHA512 3c507a8e1237f683a8cf3010db4cde600ff0dd351ab51bf99c802681fb357c8892884db44dff08b24720a8f09ef51189c2e7ae8e95c2eb2db534d7f66f26154a
- SSDEEP 393216:IkLDkLSGNkLDkLSGrovkLDkLSGNkLDkLSGro/D:IkLDkLxNkLDkLxEvkLDkLxNkLDkLxEb
- TLSH T151779E0677E441B9E1BA863496768632E772BC460B30D7DF5694B61E2E33BC09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry