General
- Target 2026-08-05_7e32fbd3c385467485726925cfc016d3_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- Sample260806-cnpm8s1frd
- SHA256 ec6338c84be61e482f83c19245356225f8b5096d39fb0e6b263ebc80cac55912
- MD5 7e32fbd3c385467485726925cfc016d3
- SHA1 c66ebfdaa2cf12bf947add4874880b4b39fc6479
- SHA512 3e1338aec2314f9233760ff7cc26b963a124785a35804a1028e5820ce6017f435f4064c5b61792a0aa87baa18ce9a4efea4f208d1143f40d34db9dd861da9bb5
- SSDEEP 98304:L0nAAYEpuhOQA91pH2WpjHrgBFFu416AWvm:YNtQmHpn6F44IAWvm
- TLSH T143766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_7e32fbd3c385467485726925cfc016d3_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_7e32fbd3c385467485726925cfc016d3_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- SHA256 ec6338c84be61e482f83c19245356225f8b5096d39fb0e6b263ebc80cac55912
- MD5 7e32fbd3c385467485726925cfc016d3
- SHA1 c66ebfdaa2cf12bf947add4874880b4b39fc6479
- SHA512 3e1338aec2314f9233760ff7cc26b963a124785a35804a1028e5820ce6017f435f4064c5b61792a0aa87baa18ce9a4efea4f208d1143f40d34db9dd861da9bb5
- SSDEEP 98304:L0nAAYEpuhOQA91pH2WpjHrgBFFu416AWvm:YNtQmHpn6F44IAWvm
- TLSH T143766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE