General
- Target 2026-08-08_eb3baea2a5be549acb5538fd42330343_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 33.8MB
- Sample260808-vmfyta1dlg
- SHA256 b0a68b649fb1aaa0aaca944876fc744ac9ea2bd147b51f5128042514f183e27b
- MD5 eb3baea2a5be549acb5538fd42330343
- SHA1 ed324109261056d6ed8b9351fa4843cd2590c0e5
- SHA512 547476c2f33bcf06ad1eaf89f823dd1a4e20f430a7bf88cd0c6d135add05b51bc560826d01a6c6faf324d926ca038a3c47ecd0ab7dade484bdda6a5d889e3b47
- SSDEEP 393216:IPvyEYKbayZ/K0ttYZTiUEtQevvqc2W1cpV2XI32i:In4yZ/K0ttYZT9E8c23pV2X+T
- TLSH T1ED775B51B6E843E2E3AAD53489B582B2EB717C0E1F31A67F1179F21E1F376905D28321
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_eb3baea2a5be549acb5538fd42330343_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_eb3baea2a5be549acb5538fd42330343_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_eb3baea2a5be549acb5538fd42330343_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 33.8MB
- SHA256 b0a68b649fb1aaa0aaca944876fc744ac9ea2bd147b51f5128042514f183e27b
- MD5 eb3baea2a5be549acb5538fd42330343
- SHA1 ed324109261056d6ed8b9351fa4843cd2590c0e5
- SHA512 547476c2f33bcf06ad1eaf89f823dd1a4e20f430a7bf88cd0c6d135add05b51bc560826d01a6c6faf324d926ca038a3c47ecd0ab7dade484bdda6a5d889e3b47
- SSDEEP 393216:IPvyEYKbayZ/K0ttYZTiUEtQevvqc2W1cpV2XI32i:In4yZ/K0ttYZT9E8c23pV2X+T
- TLSH T1ED775B51B6E843E2E3AAD53489B582B2EB717C0E1F31A67F1179F21E1F376905D28321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry