General
- Target 2026-08-03_74f5206bb9a3b106dd67b7fb5a6cda86_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 934KB
- Sample260803-frgctacl8x
- SHA256 d4a8cade6a003ab427bd064021cb0d414e392d4d4e8d9d842d0f656d2594fb61
- MD5 74f5206bb9a3b106dd67b7fb5a6cda86
- SHA1 07be96fd208a2c6c06b1e2fdbfed4a84f4c1e593
- SHA512 c05e8f1243b0d0bd77ec15df5b0b91550a786f96ec7f65f9e0440871c8780c4c8c65bd8a3b439505566340c3ee389e4c84b6c942f971b0452618a28695908702
- SSDEEP 12288:lMer5+nZoHA1Yjmer5+nIwaJZer5+nIer5+ni:lgQAuZ
- TLSH T1ED153957E6814EEAD7D94576DF14C120932AF12EABFB1230785C1208EE47787BF25A38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_74f5206bb9a3b106dd67b7fb5a6cda86_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_74f5206bb9a3b106dd67b7fb5a6cda86_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_74f5206bb9a3b106dd67b7fb5a6cda86_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 934KB
- SHA256 d4a8cade6a003ab427bd064021cb0d414e392d4d4e8d9d842d0f656d2594fb61
- MD5 74f5206bb9a3b106dd67b7fb5a6cda86
- SHA1 07be96fd208a2c6c06b1e2fdbfed4a84f4c1e593
- SHA512 c05e8f1243b0d0bd77ec15df5b0b91550a786f96ec7f65f9e0440871c8780c4c8c65bd8a3b439505566340c3ee389e4c84b6c942f971b0452618a28695908702
- SSDEEP 12288:lMer5+nZoHA1Yjmer5+nIwaJZer5+nIer5+ni:lgQAuZ
- TLSH T1ED153957E6814EEAD7D94576DF14C120932AF12EABFB1230785C1208EE47787BF25A38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Contacts a large (2156) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Adds Run key to start application