General
- Target 2026-08-03_0ba8e856f665465b53ccaf667f0553a8_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.6MB
- Sample260804-qc5f7s1ele
- SHA256 0b12082c859065df8634df7d45644753736611a18c0007a19b6d49ecba7bb2bf
- MD5 0ba8e856f665465b53ccaf667f0553a8
- SHA1 fff83ab6b73eaead47c2238a7387acb7a9c5c12c
- SHA512 2ddd04fbca306f295844b2c132881e4842fe24ca254e1b98aeb2c9e4e9b1596429123a6d33005d4c412424cf41104d3c3e585b996d0aac91af6ec9e3d6474c0f
- SSDEEP 98304:b0nAAYEpa+hyQA91pH2WpjHrgBFFu416AWv4:INAjQmHpn6F44IAWv4
- TLSH T169864BA166A7A0FCE06ED075DB2A8775E6723C274071830B12BDFA563F736142D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_0ba8e856f665465b53ccaf667f0553a8_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_0ba8e856f665465b53ccaf667f0553a8_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.6MB
- SHA256 0b12082c859065df8634df7d45644753736611a18c0007a19b6d49ecba7bb2bf
- MD5 0ba8e856f665465b53ccaf667f0553a8
- SHA1 fff83ab6b73eaead47c2238a7387acb7a9c5c12c
- SHA512 2ddd04fbca306f295844b2c132881e4842fe24ca254e1b98aeb2c9e4e9b1596429123a6d33005d4c412424cf41104d3c3e585b996d0aac91af6ec9e3d6474c0f
- SSDEEP 98304:b0nAAYEpa+hyQA91pH2WpjHrgBFFu416AWv4:INAjQmHpn6F44IAWv4
- TLSH T169864BA166A7A0FCE06ED075DB2A8775E6723C274071830B12BDFA563F736142D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE