General
- Target 2026-08-03_5aaa7511f66c192fa68d2efed594a1bf_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 62.7MB
- Sample260804-nzgmjsdq3z
- SHA256 144254f971ad16da28cb63b33b1c9a7c3ae794538807764e80f7c429edf05b30
- MD5 5aaa7511f66c192fa68d2efed594a1bf
- SHA1 edd699042ce37ab9157878071192231a582b07ab
- SHA512 0772b94ad7a7087e8358a527a61dbd106e4ab81066dcb35579be7634c813e8f122901559d4865232fbc3abe8f83a7d17b138126897235b19d0a00aed5a247713
- SSDEEP 786432:IkLDkLevkLDkLeCRkLDkLevkLDkLeChE8c23pV2X+T:v6D64Eh2ZV2XG
- TLSH T167E77B42B6E443E6E2AA953485768672EB71BC0A1F31A7AF0174F61E1F337D05D39322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_5aaa7511f66c192fa68d2efed594a1bf_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_5aaa7511f66c192fa68d2efed594a1bf_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_5aaa7511f66c192fa68d2efed594a1bf_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 62.7MB
- SHA256 144254f971ad16da28cb63b33b1c9a7c3ae794538807764e80f7c429edf05b30
- MD5 5aaa7511f66c192fa68d2efed594a1bf
- SHA1 edd699042ce37ab9157878071192231a582b07ab
- SHA512 0772b94ad7a7087e8358a527a61dbd106e4ab81066dcb35579be7634c813e8f122901559d4865232fbc3abe8f83a7d17b138126897235b19d0a00aed5a247713
- SSDEEP 786432:IkLDkLevkLDkLeCRkLDkLevkLDkLeChE8c23pV2X+T:v6D64Eh2ZV2XG
- TLSH T167E77B42B6E443E6E2AA953485768672EB71BC0A1F31A7AF0174F61E1F337D05D39322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry