General
- Target 2026-08-01_506d5a3e5fab495f3daf950c0f67d65b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 35.5MB
- Sample260802-a4m38s1cnb
- SHA256 e7ec5f3ca546e94fd88ae50513a2570e759f3fafb3de02698b26f743eafe053c
- MD5 506d5a3e5fab495f3daf950c0f67d65b
- SHA1 50a33aecaf14d48c395eef82cacba761fb81a0bb
- SHA512 1b32c9e86ab1f22f9722d05ebae967f0ea7c78d21a85662ea8cbdd2e9ac8bb072d0285873666287d3f038e877aa93cc2487228b5f7ecf7ceedebecebffb50464
- SSDEEP 393216:IkLDkLSGNkLDkLSGrovkLDkLSGNkLDkLSGro1o:IkLDkLxNkLDkLxEvkLDkLxNkLDkLxEC
- TLSH T16D879F0276E441B9E1BAC63496768632E772BC450B30D7DF5694B61E2E33BD09E39323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_506d5a3e5fab495f3daf950c0f67d65b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_506d5a3e5fab495f3daf950c0f67d65b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_506d5a3e5fab495f3daf950c0f67d65b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 35.5MB
- SHA256 e7ec5f3ca546e94fd88ae50513a2570e759f3fafb3de02698b26f743eafe053c
- MD5 506d5a3e5fab495f3daf950c0f67d65b
- SHA1 50a33aecaf14d48c395eef82cacba761fb81a0bb
- SHA512 1b32c9e86ab1f22f9722d05ebae967f0ea7c78d21a85662ea8cbdd2e9ac8bb072d0285873666287d3f038e877aa93cc2487228b5f7ecf7ceedebecebffb50464
- SSDEEP 393216:IkLDkLSGNkLDkLSGrovkLDkLSGNkLDkLSGro1o:IkLDkLxNkLDkLxEvkLDkLxNkLDkLxEC
- TLSH T16D879F0276E441B9E1BAC63496768632E772BC450B30D7DF5694B61E2E33BD09E39323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry