General
- Target 2026-08-06_0ebf89c4c17ce8c6fcda2847511a5eed_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- Sample260806-ccenws1ema
- SHA256 55dc2e3cc055116001b6a46a88e59806eba1f3542f1dbef2c37f6c5ccb5870a9
- MD5 0ebf89c4c17ce8c6fcda2847511a5eed
- SHA1 037cecc7571dac6949fa717ae42b59d56a5ed6bd
- SHA512 8a83494ca05f02bf597edea9c99688dbdffa0dae1143581cd4c7e5f28154575d9f2b57e2abeed7ec6ac24c660a9fe9d2a098f8fb430b8f2a8f1be74491c00638
- SSDEEP 98304:t0nAAYEpShjQA91pH2WpjHrgBFFu416AWvl:SNYQmHpn6F44IAWvl
- TLSH T161766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA562F736286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_0ebf89c4c17ce8c6fcda2847511a5eed_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_0ebf89c4c17ce8c6fcda2847511a5eed_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- SHA256 55dc2e3cc055116001b6a46a88e59806eba1f3542f1dbef2c37f6c5ccb5870a9
- MD5 0ebf89c4c17ce8c6fcda2847511a5eed
- SHA1 037cecc7571dac6949fa717ae42b59d56a5ed6bd
- SHA512 8a83494ca05f02bf597edea9c99688dbdffa0dae1143581cd4c7e5f28154575d9f2b57e2abeed7ec6ac24c660a9fe9d2a098f8fb430b8f2a8f1be74491c00638
- SSDEEP 98304:t0nAAYEpShjQA91pH2WpjHrgBFFu416AWvl:SNYQmHpn6F44IAWvl
- TLSH T161766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA562F736286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE