General
- Target 2026-08-12_684b6686addef2d7ddc0330866a9e7a3_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- Sample260812-km5xtssfrb
- SHA256 4636194b9218c97a5bb10bc848bbf746f8d691dc4d2c406a15f6338298e34650
- MD5 684b6686addef2d7ddc0330866a9e7a3
- SHA1 747009df80f0e421f4df2c6b3d709fd7775979bf
- SHA512 63de97c710c660dc493ee62fafa952abef99f090aa3e7d74581a1c564b36a461d828d444913f2b4825b51a0c514f4a9b4ce240d82ab093e60d06847f762b3d54
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFoui:0NA1Yakeer5+nsob
- TLSH T15505A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_684b6686addef2d7ddc0330866a9e7a3_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_684b6686addef2d7ddc0330866a9e7a3_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_684b6686addef2d7ddc0330866a9e7a3_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- SHA256 4636194b9218c97a5bb10bc848bbf746f8d691dc4d2c406a15f6338298e34650
- MD5 684b6686addef2d7ddc0330866a9e7a3
- SHA1 747009df80f0e421f4df2c6b3d709fd7775979bf
- SHA512 63de97c710c660dc493ee62fafa952abef99f090aa3e7d74581a1c564b36a461d828d444913f2b4825b51a0c514f4a9b4ce240d82ab093e60d06847f762b3d54
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFoui:0NA1Yakeer5+nsob
- TLSH T15505A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Contacts a large (2183) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Adds Run key to start application