30d8f2967d60d17e80527571195ac2cd891ff417932a41a5b16cb6008fdf86ec | Triage™

Login
Reports

Overview

overview

Static

static

3

2026-08-08...yn.exe

windows10-2004-x64

2026-08-08...yn.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_1ad1c556b65b0b1a54cf1ee6ce920be0_cobalt-strike_elex_glassworm_icedid_njrat_swisyn
Size 9.2MB
Sample260808-hwkbdabl8s
SHA256 30d8f2967d60d17e80527571195ac2cd891ff417932a41a5b16cb6008fdf86ec
MD5 1ad1c556b65b0b1a54cf1ee6ce920be0
SHA1 bed7073862f0b96b2ae90a557d663e9fa487bd9f
SHA512 f216801dd62b3592f1f6e4529fd49418d019e52527e180d2f57f254bc748f9afe13463094b34568133dd649425ec4b4b49187a9aa3da9ea97857598abe3cce0f
SSDEEP 98304:NSpbOrf4DgU6vBELOnTWPBx6wRYQKiKkKURgyLjR+gEiWyssUhVu:UZOr1WoWnRWQRpEqsFhQ
TLSH
T14DA67C23F29501D9E16ED1788B6A5232AA72BC864B30B2DF3A4C76151F75FE05B3C724
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-08_1ad1c556b65b0b1a54cf1ee6ce920be0_cobalt-strike_elex_glassworm_icedid_njrat_swisyn.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

defense_evasion discovery persistence trojan

Behavioral task

behavioral2

Sample

2026-08-08_1ad1c556b65b0b1a54cf1ee6ce920be0_cobalt-strike_elex_glassworm_icedid_njrat_swisyn.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

defense_evasion discovery persistence trojan

Malware Config

Targets

- Target
  2026-08-08_1ad1c556b65b0b1a54cf1ee6ce920be0_cobalt-strike_elex_glassworm_icedid_njrat_swisyn
- Size 9.2MB
- SHA256 30d8f2967d60d17e80527571195ac2cd891ff417932a41a5b16cb6008fdf86ec
- MD5 1ad1c556b65b0b1a54cf1ee6ce920be0
- SHA1 bed7073862f0b96b2ae90a557d663e9fa487bd9f
- SHA512 f216801dd62b3592f1f6e4529fd49418d019e52527e180d2f57f254bc748f9afe13463094b34568133dd649425ec4b4b49187a9aa3da9ea97857598abe3cce0f
- SSDEEP 98304:NSpbOrf4DgU6vBELOnTWPBx6wRYQKiKkKURgyLjR+gEiWyssUhVu:UZOr1WoWnRWQRpEqsFhQ
- TLSH
  T14DA67C23F29501D9E16ED1788B6A5232AA72BC864B30B2DF3A4C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery persistence trojan
- Modifies visibility of hidden/system files in Explorer
  defense_evasion
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  defense_evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistencetrojan

behavioral2

defense_evasiondiscoverypersistencetrojan

© 2018-2026

Terms | Privacy