General
- Target 2026-08-01_116d61a985fa4c620df7efee974f8078_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 38.9MB
- Sample260802-bprzba1gma
- SHA256 1803229961ec0753121914a814a822bda320294ffb709db5df200e0ec43c536f
- MD5 116d61a985fa4c620df7efee974f8078
- SHA1 6f4aae63119a947a0a461ef6fe6c4aa9708368ad
- SHA512 c0d1ea9a4207d1fe2f2b26a2572732d9c0668179cdd90ea664f8bd21979aa70230947361f9f75b5a2f92cceaaa36e9e48676a17c22806610d8ba811352cee92c
- SSDEEP 786432:IkLDkLxNkLDkLxsfjpYkLDkLxNkLDkLxsfjpG:23sfjU3sfjg
- TLSH T1A4979F03B7E441A9E1BAC63496768632EB72BC455B31D7DF1294B61E1E33BC09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_116d61a985fa4c620df7efee974f8078_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_116d61a985fa4c620df7efee974f8078_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_116d61a985fa4c620df7efee974f8078_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 38.9MB
- SHA256 1803229961ec0753121914a814a822bda320294ffb709db5df200e0ec43c536f
- MD5 116d61a985fa4c620df7efee974f8078
- SHA1 6f4aae63119a947a0a461ef6fe6c4aa9708368ad
- SHA512 c0d1ea9a4207d1fe2f2b26a2572732d9c0668179cdd90ea664f8bd21979aa70230947361f9f75b5a2f92cceaaa36e9e48676a17c22806610d8ba811352cee92c
- SSDEEP 786432:IkLDkLxNkLDkLxsfjpYkLDkLxNkLDkLxsfjpG:23sfjU3sfjg
- TLSH T1A4979F03B7E441A9E1BAC63496768632EB72BC455B31D7DF1294B61E1E33BC09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application