General
- Target 2026-08-04_77f2e613c6cba805a6c3be3caedb759e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 18.2MB
- Sample260804-sp43batbmc
- SHA256 17df8ed361bc93d7b14b85c54303d35d8c63e6c7d76c391eab6df4f182d8b733
- MD5 77f2e613c6cba805a6c3be3caedb759e
- SHA1 95e8b655edd93f6fa188d6a200a698063d4619c6
- SHA512 7fa35ac6d131e901e4b538caf68489aa85a0781f63ffbbaeb8410ef604f8f735bc6caa85583798b956d83c0a723816608be4c93b41c265e4d4f16ac743cb47ad
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vbe8Vb618U68Vb618US18Ufh8Vb+vyEYt:2cDcy+JcDcy+svyEYt
- TLSH T101179E17B7A440F5D16AD5748A669632EB72BC120B30A7CF43A0F6192F336D06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_77f2e613c6cba805a6c3be3caedb759e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_77f2e613c6cba805a6c3be3caedb759e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_77f2e613c6cba805a6c3be3caedb759e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 18.2MB
- SHA256 17df8ed361bc93d7b14b85c54303d35d8c63e6c7d76c391eab6df4f182d8b733
- MD5 77f2e613c6cba805a6c3be3caedb759e
- SHA1 95e8b655edd93f6fa188d6a200a698063d4619c6
- SHA512 7fa35ac6d131e901e4b538caf68489aa85a0781f63ffbbaeb8410ef604f8f735bc6caa85583798b956d83c0a723816608be4c93b41c265e4d4f16ac743cb47ad
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vbe8Vb618U68Vb618US18Ufh8Vb+vyEYt:2cDcy+JcDcy+svyEYt
- TLSH T101179E17B7A440F5D16AD5748A669632EB72BC120B30A7CF43A0F6192F336D06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application