General
- Target 2026-08-01_856b55abaffb29494a2dc1071f69cc7b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 41.5MB
- Sample260802-am2kaszhqb
- SHA256 b5e39f8cfc848a668cf4bb417749d6ae72f42f0d749b55753b6dc17311ca1701
- MD5 856b55abaffb29494a2dc1071f69cc7b
- SHA1 032a252428475d1577e08b98db22b7052a01b92c
- SHA512 57c827cc0e4312c13609c4c6e74a69575524d86cb41a0796f8022ff18bd0388e252263806c45bd92c10c1e433ab4631c23077221c1244fc0ff873d5538534e86
- SSDEEP 786432:IkLDkLxNkLDkLxsfjpYkLDkLxNkLDkLxsfjpd:23sfjU3sfj/
- TLSH T184979F03B7E441A9E0AAC63496768632EB72BC455B31D7DF1294B61E1E33BD05E39323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_856b55abaffb29494a2dc1071f69cc7b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_856b55abaffb29494a2dc1071f69cc7b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_856b55abaffb29494a2dc1071f69cc7b_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 41.5MB
- SHA256 b5e39f8cfc848a668cf4bb417749d6ae72f42f0d749b55753b6dc17311ca1701
- MD5 856b55abaffb29494a2dc1071f69cc7b
- SHA1 032a252428475d1577e08b98db22b7052a01b92c
- SHA512 57c827cc0e4312c13609c4c6e74a69575524d86cb41a0796f8022ff18bd0388e252263806c45bd92c10c1e433ab4631c23077221c1244fc0ff873d5538534e86
- SSDEEP 786432:IkLDkLxNkLDkLxsfjpYkLDkLxNkLDkLxsfjpd:23sfjU3sfj/
- TLSH T184979F03B7E441A9E0AAC63496768632EB72BC455B31D7DF1294B61E1E33BD05E39323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application