General
- Target 2026-08-03_a2c2509a538de1776c3d91edf9546103_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.2MB
- Sample260804-mhldqsxgnd
- SHA256 5dff6630c8ac0d8b3e61d34c6f9aa3baae5c32e08d8c2b4d3a06e08af0fe7c16
- MD5 a2c2509a538de1776c3d91edf9546103
- SHA1 287201eb36b808f1ad228d7d27c93a22c717d6cb
- SHA512 17f9ca0f963a3fb660dffc2753298f87e91cc8c56fb918d771f1cbc518914b927fe5be78fb700a29b1b0ab295f808bc23ae8f614ef8b877a702a334f860aec18
- SSDEEP 98304:H0nAAYEpvnGhrQA91pH2WpjHrgBFFu416AWv6:UN5niQmHpn6F44IAWv6
- TLSH T1D5766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_a2c2509a538de1776c3d91edf9546103_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a2c2509a538de1776c3d91edf9546103_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.2MB
- SHA256 5dff6630c8ac0d8b3e61d34c6f9aa3baae5c32e08d8c2b4d3a06e08af0fe7c16
- MD5 a2c2509a538de1776c3d91edf9546103
- SHA1 287201eb36b808f1ad228d7d27c93a22c717d6cb
- SHA512 17f9ca0f963a3fb660dffc2753298f87e91cc8c56fb918d771f1cbc518914b927fe5be78fb700a29b1b0ab295f808bc23ae8f614ef8b877a702a334f860aec18
- SSDEEP 98304:H0nAAYEpvnGhrQA91pH2WpjHrgBFFu416AWv6:UN5niQmHpn6F44IAWv6
- TLSH T1D5766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE