General
- Target 2026-08-16_81b297db42e453800d0ec70fd893c995_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 5.1MB
- Sample260816-h644jasdmg
- SHA256 11a4bf4e907b8ff099ff2b3ecb09d95a2422238bd9f1aa09754f7f8c57501491
- MD5 81b297db42e453800d0ec70fd893c995
- SHA1 870b1d10b3c9e6f64f96673f759a7ec0d296d723
- SHA512 e44b8ab05a877462a4f497670fc66edefbf55aa49f75db4c507f97cf3a2fdc39cc232793b766a590088657004af444cbc69488e61899efb4a4a9b209cecb394e
- SSDEEP 98304:vjPxcO4EYMjPxcO4EYADlB7a1uiSohg/D+221Nu+xgB:vjPxcO48jPxcO4wDxoaqjxgB
- TLSH T131364A13F14505A8D8158276CA8B86319B25BC584BF1AEEF36C0F7E12EB39D03B79B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-16_81b297db42e453800d0ec70fd893c995_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_81b297db42e453800d0ec70fd893c995_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_81b297db42e453800d0ec70fd893c995_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 5.1MB
- SHA256 11a4bf4e907b8ff099ff2b3ecb09d95a2422238bd9f1aa09754f7f8c57501491
- MD5 81b297db42e453800d0ec70fd893c995
- SHA1 870b1d10b3c9e6f64f96673f759a7ec0d296d723
- SHA512 e44b8ab05a877462a4f497670fc66edefbf55aa49f75db4c507f97cf3a2fdc39cc232793b766a590088657004af444cbc69488e61899efb4a4a9b209cecb394e
- SSDEEP 98304:vjPxcO4EYMjPxcO4EYADlB7a1uiSohg/D+221Nu+xgB:vjPxcO48jPxcO4wDxoaqjxgB
- TLSH T131364A13F14505A8D8158276CA8B86319B25BC584BF1AEEF36C0F7E12EB39D03B79B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory