General
- Target 2026-08-01_26f916f44e5de635a1448d0d9dffcf63_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 41.0MB
- Sample260802-bg2tjs1erc
- SHA256 6428fc61c1fde09e5f9c65cf306a44b83d11e3d5f718d2cf45a3d89afc161cc8
- MD5 26f916f44e5de635a1448d0d9dffcf63
- SHA1 1e70f3a91c066f2999a3414fc54debce91574386
- SHA512 4abe8939098aa14d61e37ba3f0c704d21321c1c97768fb9ab8aadd07aa8936dc543e01d0fbfea168198b762ba6faa39cff7de0c61ff3fbdba8780e89f1de3119
- SSDEEP 393216:2cDcy+JcDcy+svyEYKb7cDcy+JcDcy+svyEYKbn:tAyzAyvaAyzAyvp
- TLSH T1EA978D16BBA440F5E17AD5348A668632EB72BC520B319BCF4390F61D2F336D05E3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_26f916f44e5de635a1448d0d9dffcf63_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_26f916f44e5de635a1448d0d9dffcf63_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_26f916f44e5de635a1448d0d9dffcf63_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 41.0MB
- SHA256 6428fc61c1fde09e5f9c65cf306a44b83d11e3d5f718d2cf45a3d89afc161cc8
- MD5 26f916f44e5de635a1448d0d9dffcf63
- SHA1 1e70f3a91c066f2999a3414fc54debce91574386
- SHA512 4abe8939098aa14d61e37ba3f0c704d21321c1c97768fb9ab8aadd07aa8936dc543e01d0fbfea168198b762ba6faa39cff7de0c61ff3fbdba8780e89f1de3119
- SSDEEP 393216:2cDcy+JcDcy+svyEYKb7cDcy+JcDcy+svyEYKbn:tAyzAyvaAyzAyvp
- TLSH T1EA978D16BBA440F5E17AD5348A668632EB72BC520B319BCF4390F61D2F336D05E3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application