General
- Target 2026-08-10_43630d05c32a4ed5192c35f9115777fa_cobalt-strike_darkgate_elex_glassworm_icedid_njrat_stop_vidar
- Size 13.7MB
- Sample260810-c77yxszdkd
- SHA256 c563b21f9e3f0437f145d0ede41b412f76b7f5508df7e954a23542d1737f3b49
- MD5 43630d05c32a4ed5192c35f9115777fa
- SHA1 9f91211f732fdc087b4c22cd3387c675769dc199
- SHA512 20b68620169b115c94317521c3694575b2f488bae4c16c5faefa159f1f2f2db995ecd5c8dbea4943dbdde1f090c7407e8a17d7eaea85f2928e545ee9bbec7a03
- SSDEEP 98304:Jp7Dp7Dp7Dp7Dp7Dp7/KRuy5a2p7Dp7Dp7Dp7Dp7Dp7/KRuy5aJA91pH2WpjHrgn:vBBBBB/q/BBBBB/qcmHpn6F44IAWvC
- TLSH T10FE67C11729350F9F0ABA4758A7FD335E6757C230A31838F53ACD66A1E72690AD38723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_43630d05c32a4ed5192c35f9115777fa_cobalt-strike_darkgate_elex_glassworm_icedid_njrat_stop_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_43630d05c32a4ed5192c35f9115777fa_cobalt-strike_darkgate_elex_glassworm_icedid_njrat_stop_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_43630d05c32a4ed5192c35f9115777fa_cobalt-strike_darkgate_elex_glassworm_icedid_njrat_stop_vidar
- Size 13.7MB
- SHA256 c563b21f9e3f0437f145d0ede41b412f76b7f5508df7e954a23542d1737f3b49
- MD5 43630d05c32a4ed5192c35f9115777fa
- SHA1 9f91211f732fdc087b4c22cd3387c675769dc199
- SHA512 20b68620169b115c94317521c3694575b2f488bae4c16c5faefa159f1f2f2db995ecd5c8dbea4943dbdde1f090c7407e8a17d7eaea85f2928e545ee9bbec7a03
- SSDEEP 98304:Jp7Dp7Dp7Dp7Dp7Dp7/KRuy5a2p7Dp7Dp7Dp7Dp7Dp7/KRuy5aJA91pH2WpjHrgn:vBBBBB/q/BBBBB/qcmHpn6F44IAWvC
- TLSH T10FE67C11729350F9F0ABA4758A7FD335E6757C230A31838F53ACD66A1E72690AD38723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1