General
- Target 2026-08-12_54d9dc91f8ee5db62bb134dce8510be8_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.3MB
- Sample260812-vfb2aa1dnd
- SHA256 4e3794ed4305079d50ad19351290754960d4037a89a0515f0c239c357d8690d5
- MD5 54d9dc91f8ee5db62bb134dce8510be8
- SHA1 96ff86a08bb6e91d5e38eff9673b91ad37bd04e4
- SHA512 7ede157879773dbab03c11d85551e51e7966233d100247ed69ecb0d5be282cb045183fa71a35056e62ff58ab386542ab862efda95f20fb16d8de102eabf069ec
- SSDEEP 98304:j0nAAYEpbhSQA91pH2WpjHrgBFFu416AWvy:gNqQmHpn6F44IAWvy
- TLSH T13B765BA1A2A760FDE4AFD175852AC732E6717C130031970F16BCEA563FA3A146D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_54d9dc91f8ee5db62bb134dce8510be8_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_54d9dc91f8ee5db62bb134dce8510be8_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.3MB
- SHA256 4e3794ed4305079d50ad19351290754960d4037a89a0515f0c239c357d8690d5
- MD5 54d9dc91f8ee5db62bb134dce8510be8
- SHA1 96ff86a08bb6e91d5e38eff9673b91ad37bd04e4
- SHA512 7ede157879773dbab03c11d85551e51e7966233d100247ed69ecb0d5be282cb045183fa71a35056e62ff58ab386542ab862efda95f20fb16d8de102eabf069ec
- SSDEEP 98304:j0nAAYEpbhSQA91pH2WpjHrgBFFu416AWvy:gNqQmHpn6F44IAWvy
- TLSH T13B765BA1A2A760FDE4AFD175852AC732E6717C130031970F16BCEA563FA3A146D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE