General
- Target 2026-08-16_4f7cc8775beb2957cf9b8fd12de96a1f_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar
- Size 16.1MB
- Sample260816-e9t6ysz1cs
- SHA256 d98e2dd77cb4947fb175a3314a6021431bc9d4bad1e6c36d42ee03f837b46ebb
- MD5 4f7cc8775beb2957cf9b8fd12de96a1f
- SHA1 6e68dd3b0c242a1019cc9330b343e7fc5ada76c6
- SHA512 3b7ad1bff3df52022e55aa29d1d65aae6ecff2400211c23a2644e3babc0e5fb2973cbf48a6460b594a1de3b96188541e11cda794c15b3db136e70d11c2d98aba
- SSDEEP 393216:QWSOHiJiuyW8ZPuCAXbWAq4tpB9PXBm27Yd3N:QWSOFW8MCMtpB9PXP7Md
- TLSH T1A40733687BA100E6FCD9937968E1D463A2D47DAA0BA5CA9353F10A500D736C6FFB1313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_4f7cc8775beb2957cf9b8fd12de96a1f_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_4f7cc8775beb2957cf9b8fd12de96a1f_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_4f7cc8775beb2957cf9b8fd12de96a1f_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar
- Size 16.1MB
- SHA256 d98e2dd77cb4947fb175a3314a6021431bc9d4bad1e6c36d42ee03f837b46ebb
- MD5 4f7cc8775beb2957cf9b8fd12de96a1f
- SHA1 6e68dd3b0c242a1019cc9330b343e7fc5ada76c6
- SHA512 3b7ad1bff3df52022e55aa29d1d65aae6ecff2400211c23a2644e3babc0e5fb2973cbf48a6460b594a1de3b96188541e11cda794c15b3db136e70d11c2d98aba
- SSDEEP 393216:QWSOHiJiuyW8ZPuCAXbWAq4tpB9PXBm27Yd3N:QWSOFW8MCMtpB9PXP7Md
- TLSH T1A40733687BA100E6FCD9937968E1D463A2D47DAA0BA5CA9353F10A500D736C6FFB1313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory