General
- Target 2026-08-02_d134a52479aaa9f88b56992432558b82_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 4.4MB
- Sample260802-z1573sxtf1
- SHA256 91029ba2d9a66f64a32e761dd3bfe465d3b845cc46e5f98827db3c78987706ce
- MD5 d134a52479aaa9f88b56992432558b82
- SHA1 a295f0a8ccf760f164c50d76a7d66f3ff6033558
- SHA512 cdf004a6fbe64cd56c76c23c8297d6217325325f4a5409b3e57ccaf2d7c36be5b3736d08f05a10fb93a3346a7a7483b55260cbaf25569d803835df4917e0f1b2
- SSDEEP 49152:tRNklMBl8xIuKWRYoKwSzE0LSm+/AH5j/t/BK+49AW8d4dFk9Ko3z3ZB/b2Pd0bl:dduDRYz3BPe8udi3z/bYm
- TLSH T175269D4BA2A500ECC57BD0749A569907E375740603708AEB17E09AA57F33BF26EBF311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_d134a52479aaa9f88b56992432558b82_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-st.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_d134a52479aaa9f88b56992432558b82_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-st.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_d134a52479aaa9f88b56992432558b82_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 4.4MB
- SHA256 91029ba2d9a66f64a32e761dd3bfe465d3b845cc46e5f98827db3c78987706ce
- MD5 d134a52479aaa9f88b56992432558b82
- SHA1 a295f0a8ccf760f164c50d76a7d66f3ff6033558
- SHA512 cdf004a6fbe64cd56c76c23c8297d6217325325f4a5409b3e57ccaf2d7c36be5b3736d08f05a10fb93a3346a7a7483b55260cbaf25569d803835df4917e0f1b2
- SSDEEP 49152:tRNklMBl8xIuKWRYoKwSzE0LSm+/AH5j/t/BK+49AW8d4dFk9Ko3z3ZB/b2Pd0bl:dduDRYz3BPe8udi3z/bYm
- TLSH T175269D4BA2A500ECC57BD0749A569907E375740603708AEB17E09AA57F33BF26EBF311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory