General
- Target 2026-08-14_e49b6d16060b3a2bec9bf56dc2170f32_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 65.7MB
- Sample260814-pe2bwsttav
- SHA256 be546abbbabc8e4a66c7cb9c107506201b052b5b1b4bd27a60c5ffa7274584fc
- MD5 e49b6d16060b3a2bec9bf56dc2170f32
- SHA1 466d85e429f5ac92307ca5586b72812aa71da993
- SHA512 6ad654438c89e793403673bd7ab37bbedf21e2472c95e8b172d94b806b91c8bad3c5a4540c5e9df7450c6e9ff668f94ab07dfe1479f3af4e4ec0a3e59ecc84a3
- SSDEEP 786432:tYRY8YRYifjpuYRY8YRYifjp84YRY8YRYg:tYRY8YRYifjoYRY8YRYifjS4YRY8YRYg
- TLSH T1DBE78C17E69540F4E16E953487669232FA73BC120B70A7CF43A4E6291F33AD06F39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_e49b6d16060b3a2bec9bf56dc2170f32_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_e49b6d16060b3a2bec9bf56dc2170f32_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_e49b6d16060b3a2bec9bf56dc2170f32_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 65.7MB
- SHA256 be546abbbabc8e4a66c7cb9c107506201b052b5b1b4bd27a60c5ffa7274584fc
- MD5 e49b6d16060b3a2bec9bf56dc2170f32
- SHA1 466d85e429f5ac92307ca5586b72812aa71da993
- SHA512 6ad654438c89e793403673bd7ab37bbedf21e2472c95e8b172d94b806b91c8bad3c5a4540c5e9df7450c6e9ff668f94ab07dfe1479f3af4e4ec0a3e59ecc84a3
- SSDEEP 786432:tYRY8YRYifjpuYRY8YRYifjp84YRY8YRYg:tYRY8YRYifjoYRY8YRYifjS4YRY8YRYg
- TLSH T1DBE78C17E69540F4E16E953487669232FA73BC120B70A7CF43A4E6291F33AD06F39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry