General
- Target 2026-08-09_7fc4a98ac784b1503ab81743a7d570d3_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 12.4MB
- Sample260809-ckghfsybrg
- SHA256 95f4222bd8fcefd7d2f8b6d1b065e11bf71b0bfac0e6300c20c218d59df1d723
- MD5 7fc4a98ac784b1503ab81743a7d570d3
- SHA1 5a14b83cf0115ea5262c7065f2c763aba15e1813
- SHA512 08d1c97365e592a6b77088bb5cf24fd6d93da43ddc527de32300e67e7fffce1bf2dc619304e835b85a50def540bc87040acc25430d17cf76601181b7fcf3b4f4
- SSDEEP 196608:AhwFfdVnR8cE0BwksrQhseuPKD4ki2nx7YBks50up/pVtGadp+vU7zC3KEBSo2N7:AGF11mZn12w
- TLSH T126D66B4572B5C0C9E4678038C65AAAFBE2713C44CB5086DB66E03E6C3F77AD459BB312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_7fc4a98ac784b1503ab81743a7d570d3_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_7fc4a98ac784b1503ab81743a7d570d3_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_7fc4a98ac784b1503ab81743a7d570d3_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 12.4MB
- SHA256 95f4222bd8fcefd7d2f8b6d1b065e11bf71b0bfac0e6300c20c218d59df1d723
- MD5 7fc4a98ac784b1503ab81743a7d570d3
- SHA1 5a14b83cf0115ea5262c7065f2c763aba15e1813
- SHA512 08d1c97365e592a6b77088bb5cf24fd6d93da43ddc527de32300e67e7fffce1bf2dc619304e835b85a50def540bc87040acc25430d17cf76601181b7fcf3b4f4
- SSDEEP 196608:AhwFfdVnR8cE0BwksrQhseuPKD4ki2nx7YBks50up/pVtGadp+vU7zC3KEBSo2N7:AGF11mZn12w
- TLSH T126D66B4572B5C0C9E4678038C65AAAFBE2713C44CB5086DB66E03E6C3F77AD459BB312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2