General
- Target 2026-08-01_a394e3cfc32669e338f6d13e4c8d2e46_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 58.8MB
- Sample260802-aen91aag25
- SHA256 70816abcef933524f5fc7cf190f0ebf59e9f927d3f3b87a98c2e4131129b6b75
- MD5 a394e3cfc32669e338f6d13e4c8d2e46
- SHA1 d9ffbc3abe81d3bbd3204d5bd51c67d7052ea211
- SHA512 729e2dd3c7466e9973c501712d721a163411288d2b78326dd3a2278b21849c836f1870c6d74f798c564287159fc9dab18ce73cd51018645f9c5a16625b8adbd3
- SSDEEP 393216:2cDcy+JcDcy+1UEtQevvqc2W1cpV2XI327cDcy+JcDcy+1UEr:tAyzAylE8c23pV2X+pAyzAylEr
- TLSH T123D77B52B6E443E2E36A953485B58272EB72BC1A0B3197FB4274F21E1F336D05E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_a394e3cfc32669e338f6d13e4c8d2e46_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_a394e3cfc32669e338f6d13e4c8d2e46_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_a394e3cfc32669e338f6d13e4c8d2e46_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 58.8MB
- SHA256 70816abcef933524f5fc7cf190f0ebf59e9f927d3f3b87a98c2e4131129b6b75
- MD5 a394e3cfc32669e338f6d13e4c8d2e46
- SHA1 d9ffbc3abe81d3bbd3204d5bd51c67d7052ea211
- SHA512 729e2dd3c7466e9973c501712d721a163411288d2b78326dd3a2278b21849c836f1870c6d74f798c564287159fc9dab18ce73cd51018645f9c5a16625b8adbd3
- SSDEEP 393216:2cDcy+JcDcy+1UEtQevvqc2W1cpV2XI327cDcy+JcDcy+1UEr:tAyzAylE8c23pV2X+pAyzAylEr
- TLSH T123D77B52B6E443E2E36A953485B58272EB72BC1A0B3197FB4274F21E1F336D05E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry