General
- Target 2026-08-09_2d27d9954c7c5ebf068aff2ed714d284_cobalt-strike_elex_glassworm_icedid_njrat_swisyn_vidar
- Size 1.7MB
- Sample260809-cnm5eastd1
- SHA256 3008592bbb1fada05e121949454926b3cf090b424afe67ed378cef0c7c5061bf
- MD5 2d27d9954c7c5ebf068aff2ed714d284
- SHA1 ddeeea8a0dc2d1a9ed19309e047a51b2824ae14b
- SHA512 ab7846257d56519d125b192dbedd0df02ff90c14df2ad77fb66edd8523cb2eb28f10a211f841943c093070eda71f555510efe15a61b4526337586ab7f0e16d44
- SSDEEP 24576:PFOaygN+3AER+/iJCAwxl08eoxz/y/N9w/X/G:tugkvMqJ1wxlh6N
- TLSH T11D854A2A2E541DDCD426847DCB83C69FE2B1BC1A1F714B8727A17BA32E321D01A7B751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_2d27d9954c7c5ebf068aff2ed714d284_cobalt-strike_elex_glassworm_icedid_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_2d27d9954c7c5ebf068aff2ed714d284_cobalt-strike_elex_glassworm_icedid_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_2d27d9954c7c5ebf068aff2ed714d284_cobalt-strike_elex_glassworm_icedid_njrat_swisyn_vidar
- Size 1.7MB
- SHA256 3008592bbb1fada05e121949454926b3cf090b424afe67ed378cef0c7c5061bf
- MD5 2d27d9954c7c5ebf068aff2ed714d284
- SHA1 ddeeea8a0dc2d1a9ed19309e047a51b2824ae14b
- SHA512 ab7846257d56519d125b192dbedd0df02ff90c14df2ad77fb66edd8523cb2eb28f10a211f841943c093070eda71f555510efe15a61b4526337586ab7f0e16d44
- SSDEEP 24576:PFOaygN+3AER+/iJCAwxl08eoxz/y/N9w/X/G:tugkvMqJ1wxlh6N
- TLSH T11D854A2A2E541DDCD426847DCB83C69FE2B1BC1A1F714B8727A17BA32E321D01A7B751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory