General
- Target 2026-08-08_099e6610363aa1a979e1153765fb9b87_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.2MB
- Sample260808-er315shm5w
- SHA256 a968b4d665254cfddae3410ccca43039626406c61af4c83cdae96127d99e87c5
- MD5 099e6610363aa1a979e1153765fb9b87
- SHA1 dfac63912a6bcdf19cc7b00ae4481841f815e5fa
- SHA512 5f1c19250d86f07a5e2e697d32c900ed7ce23ac23304630b6ef05b9c4954f41b14573dd74ca831196cd64694159a69e730f070601b07b3d9829c6a79d1c4fbd2
- SSDEEP 98304:S0nAAYEpWU4UUU3UUUihCQA91pH2WpjHrgBFFu416AWvq:XNkU4UUU3UUULQmHpn6F44IAWvq
- TLSH T12B766CA5A2A760FDE0AFD175892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_099e6610363aa1a979e1153765fb9b87_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_099e6610363aa1a979e1153765fb9b87_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.2MB
- SHA256 a968b4d665254cfddae3410ccca43039626406c61af4c83cdae96127d99e87c5
- MD5 099e6610363aa1a979e1153765fb9b87
- SHA1 dfac63912a6bcdf19cc7b00ae4481841f815e5fa
- SHA512 5f1c19250d86f07a5e2e697d32c900ed7ce23ac23304630b6ef05b9c4954f41b14573dd74ca831196cd64694159a69e730f070601b07b3d9829c6a79d1c4fbd2
- SSDEEP 98304:S0nAAYEpWU4UUU3UUUihCQA91pH2WpjHrgBFFu416AWvq:XNkU4UUU3UUULQmHpn6F44IAWvq
- TLSH T12B766CA5A2A760FDE0AFD175892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE