General
- Target 2026-08-11_59c0e1a9d6dbc230c010891c470dde45_cobalt-strike_elex_glassworm_icedid_njrat_stealc_vidar
- Size 25.6MB
- Sample260811-dpz12acb66
- SHA256 d84f2782fa069bce097c5b00bc065b17fa3345e1933bcea228d929d8ffd5d4d7
- MD5 59c0e1a9d6dbc230c010891c470dde45
- SHA1 03634da9b384daf60f8e55e8de5ff6055e4a461c
- SHA512 90fb2e6026e8f411c0c28b27cb0d63644331761e159a80d2372937fc728150409f364cbc2bde1a0686af649b599b1ecda81352ad4e42f6ccbeae75f114e24811
- SSDEEP 196608:kFlfFlVFlfFl24FlfFlVFlfFl2QmHpn6F44IAWv/:i3Z3sO3Z3sQmHN6+Jrv/
- TLSH T1E847DF46AAAA50E8C46EC0748867D733E6313C1B4231979B56ECF61B2F737606D3D722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-11_59c0e1a9d6dbc230c010891c470dde45_cobalt-strike_elex_glassworm_icedid_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_59c0e1a9d6dbc230c010891c470dde45_cobalt-strike_elex_glassworm_icedid_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_59c0e1a9d6dbc230c010891c470dde45_cobalt-strike_elex_glassworm_icedid_njrat_stealc_vidar
- Size 25.6MB
- SHA256 d84f2782fa069bce097c5b00bc065b17fa3345e1933bcea228d929d8ffd5d4d7
- MD5 59c0e1a9d6dbc230c010891c470dde45
- SHA1 03634da9b384daf60f8e55e8de5ff6055e4a461c
- SHA512 90fb2e6026e8f411c0c28b27cb0d63644331761e159a80d2372937fc728150409f364cbc2bde1a0686af649b599b1ecda81352ad4e42f6ccbeae75f114e24811
- SSDEEP 196608:kFlfFlVFlfFl24FlfFlVFlfFl2QmHpn6F44IAWv/:i3Z3sO3Z3sQmHN6+Jrv/
- TLSH T1E847DF46AAAA50E8C46EC0748867D733E6313C1B4231979B56ECF61B2F737606D3D722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1