General
- Target 2026-08-13_018c94ddc99700fe1a1f9f605ee01f5e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 11.8MB
- Sample260813-q6cchsam6x
- SHA256 b5475689bb471c79752258dfceaf1aa641af34570229407364d670674b1a268c
- MD5 018c94ddc99700fe1a1f9f605ee01f5e
- SHA1 da4c3fd70ba9318fbc2830b8274d5ed3213d32b9
- SHA512 0ce30edbc76ae44ef210385db5ac8290b36eea5008c8f8b530166e45fbaa8e2c5f7d3aa09e1eb2ec2114852e8bb6b0d53de12a9b23ce68fedefe392ecedf4458
- SSDEEP 196608:JiHQUOFiHQUOHGnoiHQUOFiHQUOHGnJKzi:+QUOKQUOHG7QUOKQUOHGJKm
- TLSH T1D2C67C5572E440B5D1AEC63486568632E3B1BC164B30D7DF8692F71E2E337D0AE3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_018c94ddc99700fe1a1f9f605ee01f5e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_018c94ddc99700fe1a1f9f605ee01f5e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_018c94ddc99700fe1a1f9f605ee01f5e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 11.8MB
- SHA256 b5475689bb471c79752258dfceaf1aa641af34570229407364d670674b1a268c
- MD5 018c94ddc99700fe1a1f9f605ee01f5e
- SHA1 da4c3fd70ba9318fbc2830b8274d5ed3213d32b9
- SHA512 0ce30edbc76ae44ef210385db5ac8290b36eea5008c8f8b530166e45fbaa8e2c5f7d3aa09e1eb2ec2114852e8bb6b0d53de12a9b23ce68fedefe392ecedf4458
- SSDEEP 196608:JiHQUOFiHQUOHGnoiHQUOFiHQUOHGnJKzi:+QUOKQUOHG7QUOKQUOHGJKm
- TLSH T1D2C67C5572E440B5D1AEC63486568632E3B1BC164B30D7DF8692F71E2E337D0AE3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry