General
- Target 2026-08-03_26219bf9c5d1b969f468c1a1d0888bdd_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 15.9MB
- Sample260804-pyra2awzhw
- SHA256 1931adea4f0e58cb6cc44a9178ec2646a3cd34a36f9ef33290641d01df16821b
- MD5 26219bf9c5d1b969f468c1a1d0888bdd
- SHA1 14c074bf7932ae586942f10cb4b8e6ac45ca0ec2
- SHA512 1c99cb96a64df234fbad531cc9f4c81614c5cb4a22076f9a877187a0f38ef862b8a5e2489c5f1219055f238bc6b150a03e51c2b678208e29164ae10a747ff5dd
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6q7GgHIKgM/u5x6M1WoDDklJ6qCu5x6M1x:Qi8kLri8kL5oKmi8kLri8kL5oKyvr
- TLSH T14FF69F03B6D440B9E17E863496669632EA72BC460B21D7CF5794F61E2E73BC09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_26219bf9c5d1b969f468c1a1d0888bdd_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_26219bf9c5d1b969f468c1a1d0888bdd_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_26219bf9c5d1b969f468c1a1d0888bdd_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 15.9MB
- SHA256 1931adea4f0e58cb6cc44a9178ec2646a3cd34a36f9ef33290641d01df16821b
- MD5 26219bf9c5d1b969f468c1a1d0888bdd
- SHA1 14c074bf7932ae586942f10cb4b8e6ac45ca0ec2
- SHA512 1c99cb96a64df234fbad531cc9f4c81614c5cb4a22076f9a877187a0f38ef862b8a5e2489c5f1219055f238bc6b150a03e51c2b678208e29164ae10a747ff5dd
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6q7GgHIKgM/u5x6M1WoDDklJ6qCu5x6M1x:Qi8kLri8kL5oKmi8kLri8kL5oKyvr
- TLSH T14FF69F03B6D440B9E17E863496669632EA72BC460B21D7CF5794F61E2E73BC09E35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry