General
- Target 2026-08-08_bf460be8ec8dbbd588da72d7a9b0d8f8_cobalt-strike_elex_glassworm_icedid_jeefo_njrat_vidar
- Size 4.9MB
- Sample260808-fepteszhmf
- SHA256 fad5cdb675b04dd8c1fa903bc1d7bb710662b8f531b74103b89853d4045f3055
- MD5 bf460be8ec8dbbd588da72d7a9b0d8f8
- SHA1 e64482f5a25151d5d747a2f4b73d5668690de4d6
- SHA512 c07e252e811642fab7197f1ee6fe9648ee451f1ac85d96a0517efffbb6217370bc0c42506c4e70c9996bd497177d087d5cd142e2c0fd013a72b8262424045a8b
- SSDEEP 49152:NgrfGh2j4s5M1hiakTi7hzSZfOVgcFarQsX7ysOtnDdlH8wQAxx22dqhl9qPURPz:G152OEt7H87oS9qMRPld
- TLSH T1B436070673F81388E1F7867C96B65616CA76BC198B21C7CF0160A15E1E33AE58D79B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_bf460be8ec8dbbd588da72d7a9b0d8f8_cobalt-strike_elex_glassworm_icedid_jeefo_njrat_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_bf460be8ec8dbbd588da72d7a9b0d8f8_cobalt-strike_elex_glassworm_icedid_jeefo_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_bf460be8ec8dbbd588da72d7a9b0d8f8_cobalt-strike_elex_glassworm_icedid_jeefo_njrat_vidar
- Size 4.9MB
- SHA256 fad5cdb675b04dd8c1fa903bc1d7bb710662b8f531b74103b89853d4045f3055
- MD5 bf460be8ec8dbbd588da72d7a9b0d8f8
- SHA1 e64482f5a25151d5d747a2f4b73d5668690de4d6
- SHA512 c07e252e811642fab7197f1ee6fe9648ee451f1ac85d96a0517efffbb6217370bc0c42506c4e70c9996bd497177d087d5cd142e2c0fd013a72b8262424045a8b
- SSDEEP 49152:NgrfGh2j4s5M1hiakTi7hzSZfOVgcFarQsX7ysOtnDdlH8wQAxx22dqhl9qPURPz:G152OEt7H87oS9qMRPld
- TLSH T1B436070673F81388E1F7867C96B65616CA76BC198B21C7CF0160A15E1E33AE58D79B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory