General
- Target 2026-08-10_657a868794fb01785ea83692e454c9d9_bloored_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_stealc_vidar
- Size 8.2MB
- Sample260810-feey8aeb53
- SHA256 dee7c421ca37e81b1dfdb0bff5fd2900b1dd86910c0d4b53553fbd33e0d31648
- MD5 657a868794fb01785ea83692e454c9d9
- SHA1 b3504f48da2deb7c4e6f9600f0892d4af357695e
- SHA512 6d73e8199cf655f1fdc7df53c2dfcae7cc67321f5382c955f91bb54a897b778672aa4ac2f4ff23610f282b59f5b69c4d73a08bbccfcc43941146b23c532c92e9
- SSDEEP 98304:eRhLMVaQuT9t92UgeW1Psz0/h1+Upb6dBPHdCMZxExv+cPy9AuDzYj:eRhLMVahl27xsI/h1+Uc9DZGtPiDzE
- TLSH T107963A52EBB044B5F86281314C3E9B358977BD575630468B029CFD1E2EF36821B36B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_657a868794fb01785ea83692e454c9d9_bloored_cobalt-strike_elex_glassworm_hijackloader_icedid.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_657a868794fb01785ea83692e454c9d9_bloored_cobalt-strike_elex_glassworm_hijackloader_icedid.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_657a868794fb01785ea83692e454c9d9_bloored_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_stealc_vidar
- Size 8.2MB
- SHA256 dee7c421ca37e81b1dfdb0bff5fd2900b1dd86910c0d4b53553fbd33e0d31648
- MD5 657a868794fb01785ea83692e454c9d9
- SHA1 b3504f48da2deb7c4e6f9600f0892d4af357695e
- SHA512 6d73e8199cf655f1fdc7df53c2dfcae7cc67321f5382c955f91bb54a897b778672aa4ac2f4ff23610f282b59f5b69c4d73a08bbccfcc43941146b23c532c92e9
- SSDEEP 98304:eRhLMVaQuT9t92UgeW1Psz0/h1+Upb6dBPHdCMZxExv+cPy9AuDzYj:eRhLMVahl27xsI/h1+Uc9DZGtPiDzE
- TLSH T107963A52EBB044B5F86281314C3E9B358977BD575630468B029CFD1E2EF36821B36B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory