General
- Target 2026-08-05_3b5c8835098726f3a6583d3c79abb6d0_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 7.0MB
- Sample260805-1aeswassez
- SHA256 9d4197c365d6b10bbe7a964bb7e06d3676df220b8ca1115d67a1779824d4c298
- MD5 3b5c8835098726f3a6583d3c79abb6d0
- SHA1 92079e4ebe5f7ffdf4842e3a6416e4bb95187524
- SHA512 0f1c845b64379531574fdd4aae46efe42f0ee45e12ff4a4ee17f972eeb4595dce9be162815d5b35f9f80d0ea93ff866e8e9b17c12b881e57a016a320a15835ac
- SSDEEP 98304:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1OAu5x6M1wu5x6M1Ku5x6M1wu5x6M1OEb:nPdPyTPdPyEb
- TLSH T161768E12F99180F2CB691D30056AB776EB36EA120B15CBC7D364DA196D332C0AD3767B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_3b5c8835098726f3a6583d3c79abb6d0_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_3b5c8835098726f3a6583d3c79abb6d0_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_3b5c8835098726f3a6583d3c79abb6d0_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 7.0MB
- SHA256 9d4197c365d6b10bbe7a964bb7e06d3676df220b8ca1115d67a1779824d4c298
- MD5 3b5c8835098726f3a6583d3c79abb6d0
- SHA1 92079e4ebe5f7ffdf4842e3a6416e4bb95187524
- SHA512 0f1c845b64379531574fdd4aae46efe42f0ee45e12ff4a4ee17f972eeb4595dce9be162815d5b35f9f80d0ea93ff866e8e9b17c12b881e57a016a320a15835ac
- SSDEEP 98304:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1OAu5x6M1wu5x6M1Ku5x6M1wu5x6M1OEb:nPdPyTPdPyEb
- TLSH T161768E12F99180F2CB691D30056AB776EB36EA120B15CBC7D364DA196D332C0AD3767B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry