General
- Target 2026-08-13_8b18055d1160a36f7406343de26ce80a_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 7.7MB
- Sample260813-2evwbsdg58
- SHA256 95e3e0fff68049ce4a40bbfd1104d4e1a9d76dfb4ae5feca79aeb9a716f81058
- MD5 8b18055d1160a36f7406343de26ce80a
- SHA1 8704a9702dde01d95c8e7c3e7a1ce24aabc489ea
- SHA512 ea3ab1c213935335f8036e01f480b2a553d889c134164d119f1cb8fa0c27db4a5142f8948b8872e47d8af178cbf16eec7ac5d42841242c36943a977f86c7968b
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qQnUm8UW:Qi8kLri8kLO18UW
- TLSH T1CE868D02F6E440A9E16E8634D7669631EA73BC520B61D6CF56D0F62E2E337C09E35723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_8b18055d1160a36f7406343de26ce80a_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_8b18055d1160a36f7406343de26ce80a_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_8b18055d1160a36f7406343de26ce80a_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 7.7MB
- SHA256 95e3e0fff68049ce4a40bbfd1104d4e1a9d76dfb4ae5feca79aeb9a716f81058
- MD5 8b18055d1160a36f7406343de26ce80a
- SHA1 8704a9702dde01d95c8e7c3e7a1ce24aabc489ea
- SHA512 ea3ab1c213935335f8036e01f480b2a553d889c134164d119f1cb8fa0c27db4a5142f8948b8872e47d8af178cbf16eec7ac5d42841242c36943a977f86c7968b
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qQnUm8UW:Qi8kLri8kLO18UW
- TLSH T1CE868D02F6E440A9E16E8634D7669631EA73BC520B61D6CF56D0F62E2E337C09E35723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry