General
- Target 2026-08-11_7aa66b3e454df8d97d1234cb696b9c10_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 2.8MB
- Sample260811-seqf6seh78
- SHA256 ffd8addf3d7a08ae1914a188d8ea14b1d565df5f5f865744070657fada46d057
- MD5 7aa66b3e454df8d97d1234cb696b9c10
- SHA1 159ccfc45a9825af88eb834a8ff23151e9ca5e90
- SHA512 725205aadc234fb92de1e8872f4d01b09fe4758b5597058cddd92cba0dbf583e78bb95926245d8fa0db382adc98aee477d3340a8acf8179df5aafc4e32237ee9
- SSDEEP 24576:PFOa2aSlY6ZrRJEXO6dwfj6IZR7mBPqmFHMNb9W67qQ1n1qh6qPQl1h0lhSMXlc7:t6hlY6BEe6dwfJZ8qmC9hD11fqPSs2
- TLSH T122D5C40167F90799F1F39B789ABA66019976BC6A9B21C7DF0260904E0D32BD0CD75B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_7aa66b3e454df8d97d1234cb696b9c10_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_7aa66b3e454df8d97d1234cb696b9c10_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_7aa66b3e454df8d97d1234cb696b9c10_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 2.8MB
- SHA256 ffd8addf3d7a08ae1914a188d8ea14b1d565df5f5f865744070657fada46d057
- MD5 7aa66b3e454df8d97d1234cb696b9c10
- SHA1 159ccfc45a9825af88eb834a8ff23151e9ca5e90
- SHA512 725205aadc234fb92de1e8872f4d01b09fe4758b5597058cddd92cba0dbf583e78bb95926245d8fa0db382adc98aee477d3340a8acf8179df5aafc4e32237ee9
- SSDEEP 24576:PFOa2aSlY6ZrRJEXO6dwfj6IZR7mBPqmFHMNb9W67qQ1n1qh6qPQl1h0lhSMXlc7:t6hlY6BEe6dwfJZ8qmC9hD11fqPSs2
- TLSH T122D5C40167F90799F1F39B789ABA66019976BC6A9B21C7DF0260904E0D32BD0CD75B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory