General
- Target 2026-08-07_71d04445047feab3e0758c9134e28501_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 26.1MB
- Sample260808-bjv4sazvf1
- SHA256 7b80fa21dd7eb2c1c15d47990d4117147dc236b6b9b987c7bb7519d38f36764a
- MD5 71d04445047feab3e0758c9134e28501
- SHA1 390b4e02ca20cb91f85e1fc7ab1bc9a1b124314d
- SHA512 b78c028dd2c4727cb3050f8cdc8e1c32ba1a7d8733012ff2ae44a67468ab10a9e2661cd04c6ecd1d4ea0c28dd01b7a2387603e5806ce4c2d0c0d8b2f3c2a4984
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vb618U68Vb618US18UfWoKH8Vb618U68Vb618US1L:2cDcy+cDcyqobcDcy+cDx
- TLSH T15E579D17F69440F9D06ED5748A559232EA72BC520B31ABCF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_71d04445047feab3e0758c9134e28501_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_71d04445047feab3e0758c9134e28501_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_71d04445047feab3e0758c9134e28501_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 26.1MB
- SHA256 7b80fa21dd7eb2c1c15d47990d4117147dc236b6b9b987c7bb7519d38f36764a
- MD5 71d04445047feab3e0758c9134e28501
- SHA1 390b4e02ca20cb91f85e1fc7ab1bc9a1b124314d
- SHA512 b78c028dd2c4727cb3050f8cdc8e1c32ba1a7d8733012ff2ae44a67468ab10a9e2661cd04c6ecd1d4ea0c28dd01b7a2387603e5806ce4c2d0c0d8b2f3c2a4984
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vb618U68Vb618US18UfWoKH8Vb618U68Vb618US1L:2cDcy+cDcyqobcDcy+cDx
- TLSH T15E579D17F69440F9D06ED5748A559232EA72BC520B31ABCF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry