General
- Target 2026-08-04_d0c44d733873835e73aa3f0f8c50e632_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 17.4MB
- Sample260804-wn9syswgrc
- SHA256 94f8fabf2affc712e5977ef53eac0175e618fab0cf5fad08dcc2e758bac9b58c
- MD5 d0c44d733873835e73aa3f0f8c50e632
- SHA1 f6ee8188d2639d74c987b8aabf66ded3bcae1bfc
- SHA512 92e55070181eb89586e49f96f1d95effa06841fc014e0dae0a367c7724ab6434771f00a9a5507f0c5bdb718131533feb1caff5aebe20afc38f7d826c5af9a814
- SSDEEP 196608:l8Vb618U68Vb618U7e8Vb618U68Vb618U7vWqQI0py+:2cDczcDc/WqQjp3
- TLSH T15B079D13F6A540F5E06AD5748A669332EA72BC520B31A7CF4350F6192F33AD05F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_d0c44d733873835e73aa3f0f8c50e632_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_d0c44d733873835e73aa3f0f8c50e632_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_d0c44d733873835e73aa3f0f8c50e632_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 17.4MB
- SHA256 94f8fabf2affc712e5977ef53eac0175e618fab0cf5fad08dcc2e758bac9b58c
- MD5 d0c44d733873835e73aa3f0f8c50e632
- SHA1 f6ee8188d2639d74c987b8aabf66ded3bcae1bfc
- SHA512 92e55070181eb89586e49f96f1d95effa06841fc014e0dae0a367c7724ab6434771f00a9a5507f0c5bdb718131533feb1caff5aebe20afc38f7d826c5af9a814
- SSDEEP 196608:l8Vb618U68Vb618U7e8Vb618U68Vb618U7vWqQI0py+:2cDczcDc/WqQjp3
- TLSH T15B079D13F6A540F5E06AD5748A669332EA72BC520B31A7CF4350F6192F33AD05F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry