General
- Target 2026-08-02_c5a74b9c37d68cbd347524b10f1c5d20_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 13.7MB
- Sample260802-veg6xaxbme
- SHA256 551836077a9a6d9dba06bdd7c75f276393798a524c3c50e3e79a4910135ec592
- MD5 c5a74b9c37d68cbd347524b10f1c5d20
- SHA1 0cf33d90357640d330db27929c44d0ca46e835a4
- SHA512 e312c646ce64929e9a4a75f68c55e02fd2a957f5bc485323e88521c5e0870db3193a0fc201790c5845663c22ef8fe2bd9ce382b1431a9070e098969ab16d5fdc
- SSDEEP 196608:l8Vb618U68Vb618US1/8Vb618U68Vb618US1EoK:2cDcyUcDcyEo
- TLSH T101E69D17F69540F9D06ED57486569232EA72BC520B30ABCF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_c5a74b9c37d68cbd347524b10f1c5d20_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_c5a74b9c37d68cbd347524b10f1c5d20_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_c5a74b9c37d68cbd347524b10f1c5d20_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 13.7MB
- SHA256 551836077a9a6d9dba06bdd7c75f276393798a524c3c50e3e79a4910135ec592
- MD5 c5a74b9c37d68cbd347524b10f1c5d20
- SHA1 0cf33d90357640d330db27929c44d0ca46e835a4
- SHA512 e312c646ce64929e9a4a75f68c55e02fd2a957f5bc485323e88521c5e0870db3193a0fc201790c5845663c22ef8fe2bd9ce382b1431a9070e098969ab16d5fdc
- SSDEEP 196608:l8Vb618U68Vb618US1/8Vb618U68Vb618US1EoK:2cDcyUcDcyEo
- TLSH T101E69D17F69540F9D06ED57486569232EA72BC520B30ABCF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry