General
- Target 2026-08-06_e73e096833657f7ae4fa4e9abc9c45d6_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.4MB
- Sample260806-bfpgtsbk3w
- SHA256 f4d3247e4573bade06d30935ea3a94726c3233b71447b34dd0070f88eabf7b51
- MD5 e73e096833657f7ae4fa4e9abc9c45d6
- SHA1 49ba9313ef652c698e0f2d00ace8c865c3bd4e32
- SHA512 20e984511a35e724f9ec85e27187c2af990b1320e95bf6515c712b85ddf93a221cade1c2d613235e0bd219b6b6ca46b1e726683942fb28da6cf2f77a61789d2d
- SSDEEP 98304:D0nAAYEpK+hHQA91pH2WpjHrgBFFu416AWvW:ANEaQmHpn6F44IAWvW
- TLSH T107765AA5A6A770FCE0AFD075992AC736E6727C130031930B16BDF6562F736242D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_e73e096833657f7ae4fa4e9abc9c45d6_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_e73e096833657f7ae4fa4e9abc9c45d6_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.4MB
- SHA256 f4d3247e4573bade06d30935ea3a94726c3233b71447b34dd0070f88eabf7b51
- MD5 e73e096833657f7ae4fa4e9abc9c45d6
- SHA1 49ba9313ef652c698e0f2d00ace8c865c3bd4e32
- SHA512 20e984511a35e724f9ec85e27187c2af990b1320e95bf6515c712b85ddf93a221cade1c2d613235e0bd219b6b6ca46b1e726683942fb28da6cf2f77a61789d2d
- SSDEEP 98304:D0nAAYEpK+hHQA91pH2WpjHrgBFFu416AWvW:ANEaQmHpn6F44IAWvW
- TLSH T107765AA5A6A770FCE0AFD075992AC736E6727C130031930B16BDF6562F736242D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE