General
- Target 2026-08-06_804c5c9064275a2b85574a00553a5acd_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- Sample260806-2xravssdph
- SHA256 8eb187d2565ee1b25e4534daccbe3be3880bb99d12ad7c0de8a9be081b1bd124
- MD5 804c5c9064275a2b85574a00553a5acd
- SHA1 8f12faeaad75f0db724bad127a480b5702e492f4
- SHA512 6a46121a4a35df0ddd1e094aece358bd67dd073cbca8b4fb4d919c4c2741d9d557aa9c5198e215427a2544e9113e533332feb1c12f5335125ff2eb001bdf5b76
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFouw:0NA1Yakeer5+nsob
- TLSH T16805A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_804c5c9064275a2b85574a00553a5acd_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_804c5c9064275a2b85574a00553a5acd_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_804c5c9064275a2b85574a00553a5acd_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- SHA256 8eb187d2565ee1b25e4534daccbe3be3880bb99d12ad7c0de8a9be081b1bd124
- MD5 804c5c9064275a2b85574a00553a5acd
- SHA1 8f12faeaad75f0db724bad127a480b5702e492f4
- SHA512 6a46121a4a35df0ddd1e094aece358bd67dd073cbca8b4fb4d919c4c2741d9d557aa9c5198e215427a2544e9113e533332feb1c12f5335125ff2eb001bdf5b76
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFouw:0NA1Yakeer5+nsob
- TLSH T16805A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Contacts a large (968) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Adds Run key to start application