General
- Target 2026-08-16_fed4d8688d9e2172502c170d4acb4e5a_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 18.7MB
- Sample260816-la3glst1ax
- SHA256 9bf1261aa90233cf01422e7a369e1618e59e9727b0467061d615dc3f31df8f91
- MD5 fed4d8688d9e2172502c170d4acb4e5a
- SHA1 a0cf779e286fdf127654e69b80a3a3501e24e12e
- SHA512 f30e8a0290057901934f116d8f83cfe3c551b669891cfdd69e1ee0487c880f33f8eb2b6d7ee1953af8f4ac3fdfe305488f5433faf8fb5d20708e25961f62cfd6
- SSDEEP 98304:Su5x6M1pLapIAu5x6M1pLapIIoq2VjnmOu5x6M1pLapIAu5x6M1pLapIIoq2Vjnj:JtcITtcIIGnotcITtcIIGnJKz+tcI7w8
- TLSH T16B174B22B1E140A5C29D9131CF568731E3E27C698FF1C3EBA155B6D92F335C07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_fed4d8688d9e2172502c170d4acb4e5a_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_fed4d8688d9e2172502c170d4acb4e5a_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_fed4d8688d9e2172502c170d4acb4e5a_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 18.7MB
- SHA256 9bf1261aa90233cf01422e7a369e1618e59e9727b0467061d615dc3f31df8f91
- MD5 fed4d8688d9e2172502c170d4acb4e5a
- SHA1 a0cf779e286fdf127654e69b80a3a3501e24e12e
- SHA512 f30e8a0290057901934f116d8f83cfe3c551b669891cfdd69e1ee0487c880f33f8eb2b6d7ee1953af8f4ac3fdfe305488f5433faf8fb5d20708e25961f62cfd6
- SSDEEP 98304:Su5x6M1pLapIAu5x6M1pLapIIoq2VjnmOu5x6M1pLapIAu5x6M1pLapIIoq2Vjnj:JtcITtcIIGnotcITtcIIGnJKz+tcI7w8
- TLSH T16B174B22B1E140A5C29D9131CF568731E3E27C698FF1C3EBA155B6D92F335C07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry