General
- Target 2026-08-04_bb14a1f3f5ada693e7cd7c162a610e59_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 54.6MB
- Sample260804-2a2s3s1hmc
- SHA256 57608a2403df8ffc67786a554135416fac00ccc017838899adfed1eade75b37f
- MD5 bb14a1f3f5ada693e7cd7c162a610e59
- SHA1 9ca64404e442ff87bc46ab9f489ed38cb5c5d4f2
- SHA512 0eb2accc91063e8e81166e36cffcd7ed954316417c688d22091371d3da2b35e602f06fa9ab3e01e835afc910bba07139be7e4607c78abc1137f3235ff5d50e73
- SSDEEP 786432:IkLDkLevkLDkLeDkLDkLevkLDkLeEE8c23pV2X+T:v6G6EEh2ZV2XG
- TLSH T134C77C42B6E443E6E36A853485768272EB71BC4E1F21A6BF1674F21E1E337D05E35322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_bb14a1f3f5ada693e7cd7c162a610e59_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_bb14a1f3f5ada693e7cd7c162a610e59_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_bb14a1f3f5ada693e7cd7c162a610e59_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 54.6MB
- SHA256 57608a2403df8ffc67786a554135416fac00ccc017838899adfed1eade75b37f
- MD5 bb14a1f3f5ada693e7cd7c162a610e59
- SHA1 9ca64404e442ff87bc46ab9f489ed38cb5c5d4f2
- SHA512 0eb2accc91063e8e81166e36cffcd7ed954316417c688d22091371d3da2b35e602f06fa9ab3e01e835afc910bba07139be7e4607c78abc1137f3235ff5d50e73
- SSDEEP 786432:IkLDkLevkLDkLeDkLDkLevkLDkLeEE8c23pV2X+T:v6G6EEh2ZV2XG
- TLSH T134C77C42B6E443E6E36A853485768272EB71BC4E1F21A6BF1674F21E1E337D05E35322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry