General
- Target 2026-08-10_c76bd7e0807219dede73ada06cf1fa9a_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 15.9MB
- Sample260810-wvtejszvhv
- SHA256 264a2388756aa597555eea496c47f64cbb62660b3ba4aeb3ee5fb9e29c7c0eed
- MD5 c76bd7e0807219dede73ada06cf1fa9a
- SHA1 edfa122be9f17c58d8816da556672f4e48e00674
- SHA512 a2e2d646183a2328e9f948cbe45fe6360e6516e65eaf41a0bcd95e37503efeb8153513898b28b0ba9631ef2baf78221fed90cff14446b77f5da387916c045f93
- SSDEEP 196608:l8Vb618U6D8Vb618U68vyEYc/b3w8rWqQI0pyG:2cpc7vyEYKbPWqQjpH
- TLSH T1E2F67D13B6E940F5E06AD5748A768732EB72BC521B31A7CF0250F6192F33AD05E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_c76bd7e0807219dede73ada06cf1fa9a_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_c76bd7e0807219dede73ada06cf1fa9a_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_c76bd7e0807219dede73ada06cf1fa9a_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 15.9MB
- SHA256 264a2388756aa597555eea496c47f64cbb62660b3ba4aeb3ee5fb9e29c7c0eed
- MD5 c76bd7e0807219dede73ada06cf1fa9a
- SHA1 edfa122be9f17c58d8816da556672f4e48e00674
- SHA512 a2e2d646183a2328e9f948cbe45fe6360e6516e65eaf41a0bcd95e37503efeb8153513898b28b0ba9631ef2baf78221fed90cff14446b77f5da387916c045f93
- SSDEEP 196608:l8Vb618U6D8Vb618U68vyEYc/b3w8rWqQI0pyG:2cpc7vyEYKbPWqQjpH
- TLSH T1E2F67D13B6E940F5E06AD5748A768732EB72BC521B31A7CF0250F6192F33AD05E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry