General
- Target 2026-08-03_6b63f798bed3aedd1db5d957c9165097_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- Sample260804-nmangavvd1
- SHA256 0ed93c03b7b5c7628432175821424bbb9a70fdb9bcad4f14a242e18333420e22
- MD5 6b63f798bed3aedd1db5d957c9165097
- SHA1 e152bc88c9f4b8a382e76a37ef1fa557d6cb3c50
- SHA512 7d98530a794bbfcf92e4b006e4425866c29afde92452dd6c090617d61c5aa1eab66a1c12c080d5a554edeb06a0a51b0c1d3317d7d448d4b53fd708f52ee183ec
- SSDEEP 98304:C0nAAYEpxh+QA91pH2WpjHrgBFFu416AWvg:nN8QmHpn6F44IAWvg
- TLSH T1A3766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_6b63f798bed3aedd1db5d957c9165097_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_6b63f798bed3aedd1db5d957c9165097_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- SHA256 0ed93c03b7b5c7628432175821424bbb9a70fdb9bcad4f14a242e18333420e22
- MD5 6b63f798bed3aedd1db5d957c9165097
- SHA1 e152bc88c9f4b8a382e76a37ef1fa557d6cb3c50
- SHA512 7d98530a794bbfcf92e4b006e4425866c29afde92452dd6c090617d61c5aa1eab66a1c12c080d5a554edeb06a0a51b0c1d3317d7d448d4b53fd708f52ee183ec
- SSDEEP 98304:C0nAAYEpxh+QA91pH2WpjHrgBFFu416AWvg:nN8QmHpn6F44IAWvg
- TLSH T1A3766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE