General
- Target 2026-08-05_a6b483933f18d74884826fcbf32fde41_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 9.6MB
- Sample260805-szv76acb49
- SHA256 4344f9edd036b500fb1c774c1bd7af4337d4e8156abb22b3d9ca6458a15a4c0a
- MD5 a6b483933f18d74884826fcbf32fde41
- SHA1 fa1e82762bcb17f7b49f0a7c69c58bc9e4e18ed4
- SHA512 9e69318558a616677c80a9832184126a8f798919727d3e5e2fa07ad45f04e804d6be07d6b1bcbf0d7f90e4b755aa5c065cd41beb160efe32e15f27f772188b6d
- SSDEEP 98304:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1Khx0z/u5x6M1wu5x6M1Ku5x6M1wu5x6M1Khy:nPdPCKzoPdPCKzn
- TLSH T1FAA66C22B5E240F6C66D58308B5A6731A6F2BD614FA1C7C7C354F62D1F321D06E3A62B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_a6b483933f18d74884826fcbf32fde41_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_a6b483933f18d74884826fcbf32fde41_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_a6b483933f18d74884826fcbf32fde41_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 9.6MB
- SHA256 4344f9edd036b500fb1c774c1bd7af4337d4e8156abb22b3d9ca6458a15a4c0a
- MD5 a6b483933f18d74884826fcbf32fde41
- SHA1 fa1e82762bcb17f7b49f0a7c69c58bc9e4e18ed4
- SHA512 9e69318558a616677c80a9832184126a8f798919727d3e5e2fa07ad45f04e804d6be07d6b1bcbf0d7f90e4b755aa5c065cd41beb160efe32e15f27f772188b6d
- SSDEEP 98304:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1Khx0z/u5x6M1wu5x6M1Ku5x6M1wu5x6M1Khy:nPdPCKzoPdPCKzn
- TLSH T1FAA66C22B5E240F6C66D58308B5A6731A6F2BD614FA1C7C7C354F62D1F321D06E3A62B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry