General
- Target 2026-08-02_40d22b34ceff26fabb541e84c842f202_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 19.5MB
- Sample260802-dsqxjastex
- SHA256 c03bf9eb68f76ca4c6a5c55382037814b6bc7c9e4f7251bb2d9935f745c43ca0
- MD5 40d22b34ceff26fabb541e84c842f202
- SHA1 30c4782ab127eaca86eb422ec3240bfdc7a1e2da
- SHA512 07f9a61cfb2891ea48cfcaba4d38211919a7a9a0c6b7bce09ae6c989970f42443cb9213cbc92a34fcc1a18ebd4df36a028d80a43848436a5d3f282d498b72822
- SSDEEP 196608:Qi8kLri8kLSGnhi8kLri8kLSGn5WqQI0pyh:IkLDkLSGNkLDkLSG5WqQjpo
- TLSH T1EB279F03B7E441A9E1AAC63496768632EB72BC455B31D7DF1294B61E1E33BC09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_40d22b34ceff26fabb541e84c842f202_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_40d22b34ceff26fabb541e84c842f202_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_40d22b34ceff26fabb541e84c842f202_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 19.5MB
- SHA256 c03bf9eb68f76ca4c6a5c55382037814b6bc7c9e4f7251bb2d9935f745c43ca0
- MD5 40d22b34ceff26fabb541e84c842f202
- SHA1 30c4782ab127eaca86eb422ec3240bfdc7a1e2da
- SHA512 07f9a61cfb2891ea48cfcaba4d38211919a7a9a0c6b7bce09ae6c989970f42443cb9213cbc92a34fcc1a18ebd4df36a028d80a43848436a5d3f282d498b72822
- SSDEEP 196608:Qi8kLri8kLSGnhi8kLri8kLSGn5WqQI0pyh:IkLDkLSGNkLDkLSG5WqQjpo
- TLSH T1EB279F03B7E441A9E1AAC63496768632EB72BC455B31D7DF1294B61E1E33BC09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry