General
- Target 2026-08-08_2fca20e75ab9e7913e99a6b6f421b3f9_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- Sample260808-efa6zsbf22
- SHA256 8f2bc013074712d42bdfe18a48aa5ed778cfb9b8d08943b996789f05c878bb2d
- MD5 2fca20e75ab9e7913e99a6b6f421b3f9
- SHA1 0e3b0b277512854503a62d6cc177517f48b85a4f
- SHA512 6e5245b8ad7c3692fee5c13e0f5aa6ef10e431c57c2d16301c90bbb9aae0e1cb441b1925c259664518a83af8f80a68d6891fde69b6105290d0ce005e9a1ba255
- SSDEEP 98304:h0nAAYEpGjhfA91pH2WpjHrgBFFu416AWv/:2NA9mHpn6F44IAWv/
- TLSH T15D765CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA562F736286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_2fca20e75ab9e7913e99a6b6f421b3f9_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_2fca20e75ab9e7913e99a6b6f421b3f9_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- SHA256 8f2bc013074712d42bdfe18a48aa5ed778cfb9b8d08943b996789f05c878bb2d
- MD5 2fca20e75ab9e7913e99a6b6f421b3f9
- SHA1 0e3b0b277512854503a62d6cc177517f48b85a4f
- SHA512 6e5245b8ad7c3692fee5c13e0f5aa6ef10e431c57c2d16301c90bbb9aae0e1cb441b1925c259664518a83af8f80a68d6891fde69b6105290d0ce005e9a1ba255
- SSDEEP 98304:h0nAAYEpGjhfA91pH2WpjHrgBFFu416AWv/:2NA9mHpn6F44IAWv/
- TLSH T15D765CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA562F736286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE