General
- Target 2026-08-03_4480cc29d98a0521f3e1ffe48f814fc3_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 61.0MB
- Sample260804-pd7saawtet
- SHA256 b1d858ee5bfa671dd5a6ef03df53279f698ac316860b82a62350691555af5e95
- MD5 4480cc29d98a0521f3e1ffe48f814fc3
- SHA1 9d18a79b8e90925a23640741c2efbc07e1c5d910
- SHA512 9404b0a7bcf9fa3f3c972f2564b9289acfe3632839f694d4ae8d29c584a87cccad7707e399fe6300a5ce7e78b7ffc79eff418f56848ee6b66ffa025bbd30daba
- SSDEEP 393216:2c7cSc7cnc7cSc7c+wdc7cSc7cPc7cSc7cnc7cSc7c+wdc7cSc7cWoO:tYRYcYRY9WYRYEYRYcYRY9WYRYWoO
- TLSH T1B0E77B17E69440F5D16E9830C7A69232FA73B8120BA197CB43E4D62D1F336D06E7A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_4480cc29d98a0521f3e1ffe48f814fc3_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_4480cc29d98a0521f3e1ffe48f814fc3_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_4480cc29d98a0521f3e1ffe48f814fc3_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 61.0MB
- SHA256 b1d858ee5bfa671dd5a6ef03df53279f698ac316860b82a62350691555af5e95
- MD5 4480cc29d98a0521f3e1ffe48f814fc3
- SHA1 9d18a79b8e90925a23640741c2efbc07e1c5d910
- SHA512 9404b0a7bcf9fa3f3c972f2564b9289acfe3632839f694d4ae8d29c584a87cccad7707e399fe6300a5ce7e78b7ffc79eff418f56848ee6b66ffa025bbd30daba
- SSDEEP 393216:2c7cSc7cnc7cSc7c+wdc7cSc7cPc7cSc7cnc7cSc7c+wdc7cSc7cWoO:tYRYcYRY9WYRYEYRYcYRY9WYRYWoO
- TLSH T1B0E77B17E69440F5D16E9830C7A69232FA73B8120BA197CB43E4D62D1F336D06E7A727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry