General
- Target 2026-08-10_4631f8f819e104c63f68aab20c3bca58_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 11.0MB
- Sample260810-2kqtkaba62
- SHA256 73d57b6ec69099309cb6eb8440fe21622deb9f23962aa4493a9d342cd4ebb4e8
- MD5 4631f8f819e104c63f68aab20c3bca58
- SHA1 718aae5993f1bbc90954b670b3d3e30af4c8ec25
- SHA512 fcb87b8cbc15ac94f2556dce359434648759786a7ac99ae60a05e17fe8dc8fb27bf2a857a9dbdf5574fec5042fbf2d2fe19bad24d0ddfb5b625b72a294e2dad7
- SSDEEP 98304:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1OAu5x6M1wu5x6M1Ku5x6M1wu5x6M1OWq9ceJ:nPdPyTPdPyWWqQI0py+
- TLSH T1C1C6AE03F6D580F5D2699930467AA732EB72BC524B2197CB8350FB182E336D05E3A776
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_4631f8f819e104c63f68aab20c3bca58_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_4631f8f819e104c63f68aab20c3bca58_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_4631f8f819e104c63f68aab20c3bca58_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 11.0MB
- SHA256 73d57b6ec69099309cb6eb8440fe21622deb9f23962aa4493a9d342cd4ebb4e8
- MD5 4631f8f819e104c63f68aab20c3bca58
- SHA1 718aae5993f1bbc90954b670b3d3e30af4c8ec25
- SHA512 fcb87b8cbc15ac94f2556dce359434648759786a7ac99ae60a05e17fe8dc8fb27bf2a857a9dbdf5574fec5042fbf2d2fe19bad24d0ddfb5b625b72a294e2dad7
- SSDEEP 98304:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1OAu5x6M1wu5x6M1Ku5x6M1wu5x6M1OWq9ceJ:nPdPyTPdPyWWqQI0py+
- TLSH T1C1C6AE03F6D580F5D2699930467AA732EB72BC524B2197CB8350FB182E336D05E3A776
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry