General
- Target 2026-08-08_19e7c15ee5cee84cad0323e9e3a40c14_bloored_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 3.9MB
- Sample260808-n6b1mszzaz
- SHA256 c45ce26cf55f911f9464d0c900695a22cebdf4e7c2f9db421d26022abe247e74
- MD5 19e7c15ee5cee84cad0323e9e3a40c14
- SHA1 c6a409e1bab40e3fb201f357e2c37b7b65ef7538
- SHA512 18d181c4befa8c9374cfef46a70b55fecd743dea633552857748d6e9f7fe6e96238abe79e561857928cab3f2385f177ede39cb615d15d6c54f070449c415b5e7
- SSDEEP 98304:eRhLMVaQuT9tqy2UP2Yj7/u1k+kqtvOanp:eRhLMVahyy2C2Y3zbqtOop
- TLSH T12A163711A2D3407CDDD23D70656FDAF9AF65AD08072046CB72B4BE966B32DC31A3931A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_19e7c15ee5cee84cad0323e9e3a40c14_bloored_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_19e7c15ee5cee84cad0323e9e3a40c14_bloored_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_19e7c15ee5cee84cad0323e9e3a40c14_bloored_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 3.9MB
- SHA256 c45ce26cf55f911f9464d0c900695a22cebdf4e7c2f9db421d26022abe247e74
- MD5 19e7c15ee5cee84cad0323e9e3a40c14
- SHA1 c6a409e1bab40e3fb201f357e2c37b7b65ef7538
- SHA512 18d181c4befa8c9374cfef46a70b55fecd743dea633552857748d6e9f7fe6e96238abe79e561857928cab3f2385f177ede39cb615d15d6c54f070449c415b5e7
- SSDEEP 98304:eRhLMVaQuT9tqy2UP2Yj7/u1k+kqtvOanp:eRhLMVahyy2C2Y3zbqtOop
- TLSH T12A163711A2D3407CDDD23D70656FDAF9AF65AD08072046CB72B4BE966B32DC31A3931A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory