General
- Target 2026-08-08_1a3898dd207a7200e39ce022b932ac36_bloored_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 2.1MB
- Sample260808-n57e6azygw
- SHA256 fa0e5f903e0f377108b48626625e758c2eaadbe2767aee11917966232f87ea8b
- MD5 1a3898dd207a7200e39ce022b932ac36
- SHA1 2076217e6b59df24964c1afe86b45bcd27637165
- SHA512 2b1931adc9ac843c06bb6ba66d37ba6d2611bd6c3d2ca63ed25786082c8a14cfd74a6c07a6d5d76e8259000578aaa9c92c1e114fc55e20923e6dcbba4b182657
- SSDEEP 49152:eRhLMVB8QuPxXb9ostkcvwN/Vs288D+W5tn+fviw:eRhLMVaQuT9tqy2gWnn2
- TLSH T1E7A5AC06A29404B6E97301758896DA3AD231BC650721C7CF53E8FEA77F736D26A3D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_1a3898dd207a7200e39ce022b932ac36_bloored_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_1a3898dd207a7200e39ce022b932ac36_bloored_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_1a3898dd207a7200e39ce022b932ac36_bloored_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 2.1MB
- SHA256 fa0e5f903e0f377108b48626625e758c2eaadbe2767aee11917966232f87ea8b
- MD5 1a3898dd207a7200e39ce022b932ac36
- SHA1 2076217e6b59df24964c1afe86b45bcd27637165
- SHA512 2b1931adc9ac843c06bb6ba66d37ba6d2611bd6c3d2ca63ed25786082c8a14cfd74a6c07a6d5d76e8259000578aaa9c92c1e114fc55e20923e6dcbba4b182657
- SSDEEP 49152:eRhLMVB8QuPxXb9ostkcvwN/Vs288D+W5tn+fviw:eRhLMVaQuT9tqy2gWnn2
- TLSH T1E7A5AC06A29404B6E97301758896DA3AD231BC650721C7CF53E8FEA77F736D26A3D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory