General
- Target 2026-08-13_844b4dbe3aa99264faa6ae4d3144ff2d_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- Sample260813-e15w4a1grb
- SHA256 f776134c1d4bc1b79f2e9e1f60a5eab1453b8c7065a917fb40240d6bd14f9a77
- MD5 844b4dbe3aa99264faa6ae4d3144ff2d
- SHA1 51acd29dfd5c2895b7faf0e23b1cb21358eda008
- SHA512 e7660e45e3f5cc80ff8d0834d7e3556fd5037e6f3aff540b78248fe9b89dcc6d13215d23466362bd8a0b30de66860617a10619f6cee9dd5b2adba429854ee811
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFoux:0NA1Yakeer5+nsoW
- TLSH T1D105A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_844b4dbe3aa99264faa6ae4d3144ff2d_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_844b4dbe3aa99264faa6ae4d3144ff2d_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_844b4dbe3aa99264faa6ae4d3144ff2d_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- SHA256 f776134c1d4bc1b79f2e9e1f60a5eab1453b8c7065a917fb40240d6bd14f9a77
- MD5 844b4dbe3aa99264faa6ae4d3144ff2d
- SHA1 51acd29dfd5c2895b7faf0e23b1cb21358eda008
- SHA512 e7660e45e3f5cc80ff8d0834d7e3556fd5037e6f3aff540b78248fe9b89dcc6d13215d23466362bd8a0b30de66860617a10619f6cee9dd5b2adba429854ee811
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFoux:0NA1Yakeer5+nsoW
- TLSH T1D105A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Contacts a large (2026) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Adds Run key to start application