General
- Target 2026-08-14_31bacdaa2e7503a3b0d765ed60f98f7d_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 55.0MB
- Sample260815-ad1xeabp4v
- SHA256 ef83790701d884feeb2fbe4d03a671a21732a4fc7b85f64d812dc81f05fbb081
- MD5 31bacdaa2e7503a3b0d765ed60f98f7d
- SHA1 7622a9e43f14b2a5b2dbbc078a469d794d2a8d81
- SHA512 e081f8cc44be192e233d71de376e07838eb250d64d26a4c781edae1ccbce2990c24bbe3ae2767fc57eeb51bd8cce5e6b26858474d69a9ef11b2b087f0ae2fdbd
- SSDEEP 393216:2c+cuc+c8KX6c+cuc+c8KX+obc+cuc+c8KX6c+cuc+c8KX+o1:tVlVPpVlVPr4VlVPpVlVPr1
- TLSH T16AC78C17B6A544F5D06E99348B568331EAB2BC620F7097CF8294F2191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_31bacdaa2e7503a3b0d765ed60f98f7d_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_31bacdaa2e7503a3b0d765ed60f98f7d_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_31bacdaa2e7503a3b0d765ed60f98f7d_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 55.0MB
- SHA256 ef83790701d884feeb2fbe4d03a671a21732a4fc7b85f64d812dc81f05fbb081
- MD5 31bacdaa2e7503a3b0d765ed60f98f7d
- SHA1 7622a9e43f14b2a5b2dbbc078a469d794d2a8d81
- SHA512 e081f8cc44be192e233d71de376e07838eb250d64d26a4c781edae1ccbce2990c24bbe3ae2767fc57eeb51bd8cce5e6b26858474d69a9ef11b2b087f0ae2fdbd
- SSDEEP 393216:2c+cuc+c8KX6c+cuc+c8KX+obc+cuc+c8KX6c+cuc+c8KX+o1:tVlVPpVlVPr4VlVPpVlVPr1
- TLSH T16AC78C17B6A544F5D06E99348B568331EAB2BC620F7097CF8294F2191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry