General
- Target 2026-08-03_0889183c9f93e62c5b0511364e9cbf96_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 39.2MB
- Sample260804-qeqe3afl81
- SHA256 51aead5da9fe8e73232c755b0a177db339a69fc4c1976cafca946b73926c927d
- MD5 0889183c9f93e62c5b0511364e9cbf96
- SHA1 8d75efeed1821b49a981127072a53fdeffb23de6
- SHA512 1f420c695951990e034f3b99910f5a43948621c37560e3487a279274c39b31bc3b245e75d587b20a9505287d86c614cde87120a4ecff1e1918e9b9ae57b551b2
- SSDEEP 393216:2c7cSc7cnc7cSc7c+wdc7cSc7cPc7cSc7c8:tYRYcYRY9WYRYEYRY8
- TLSH T18F977B17E69440F5D16E9930C7A69232FA73B8120BB197CB43E4C62D1F236D06E7A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_0889183c9f93e62c5b0511364e9cbf96_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_0889183c9f93e62c5b0511364e9cbf96_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_0889183c9f93e62c5b0511364e9cbf96_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 39.2MB
- SHA256 51aead5da9fe8e73232c755b0a177db339a69fc4c1976cafca946b73926c927d
- MD5 0889183c9f93e62c5b0511364e9cbf96
- SHA1 8d75efeed1821b49a981127072a53fdeffb23de6
- SHA512 1f420c695951990e034f3b99910f5a43948621c37560e3487a279274c39b31bc3b245e75d587b20a9505287d86c614cde87120a4ecff1e1918e9b9ae57b551b2
- SSDEEP 393216:2c7cSc7cnc7cSc7c+wdc7cSc7cPc7cSc7c8:tYRYcYRY9WYRYEYRY8
- TLSH T18F977B17E69440F5D16E9930C7A69232FA73B8120BB197CB43E4C62D1F236D06E7A727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry