General
- Target 2026-08-05_d61c2939cf5910b06259f0a6054a4280_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 7.0MB
- Sample260805-vxlxtacg54
- SHA256 a39bf3fdf9d29acc6119cd83e46517f98032ecce7d0f32d69e8ac4c3fc563089
- MD5 d61c2939cf5910b06259f0a6054a4280
- SHA1 35cb552de3474c159068c0529d2dd027fb77becc
- SHA512 da48bc548abf7f164ccfd0b3020c05302f75cf6eb6bb86aabb4b16a1e7762de349af8748ac56942fe4e0d8ca226f872d1d65bf0eb65bb32edb184e5da9b570fc
- SSDEEP 98304:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1OAu5x6M1wu5x6M1Ku5x6M1wu5x6M1O+j:nPdPyTPdPy+j
- TLSH T117768E12F99180F2CB691D30056AB776EB36EA120B15CBC7D364DA196D332C0AD3767B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_d61c2939cf5910b06259f0a6054a4280_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_d61c2939cf5910b06259f0a6054a4280_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_d61c2939cf5910b06259f0a6054a4280_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 7.0MB
- SHA256 a39bf3fdf9d29acc6119cd83e46517f98032ecce7d0f32d69e8ac4c3fc563089
- MD5 d61c2939cf5910b06259f0a6054a4280
- SHA1 35cb552de3474c159068c0529d2dd027fb77becc
- SHA512 da48bc548abf7f164ccfd0b3020c05302f75cf6eb6bb86aabb4b16a1e7762de349af8748ac56942fe4e0d8ca226f872d1d65bf0eb65bb32edb184e5da9b570fc
- SSDEEP 98304:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1OAu5x6M1wu5x6M1Ku5x6M1wu5x6M1O+j:nPdPyTPdPy+j
- TLSH T117768E12F99180F2CB691D30056AB776EB36EA120B15CBC7D364DA196D332C0AD3767B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry