General
- Target 2026-08-16_2f4adf80a100b85d5d0ffe21776b3c69_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 37.4MB
- Sample260816-ng89vaaj91
- SHA256 984163974317c243857fd3cdb1c17150505c02229b6dd6e08759046d3228f9a4
- MD5 2f4adf80a100b85d5d0ffe21776b3c69
- SHA1 cb0b1a49fe98376d06f062e492690c969b151737
- SHA512 f7205e7232e5f31cd5c7ee72f06a3538d72b0160113c2c5f98341c2163dd082673e68cc20b1d9e72fae09038ec52bdaa35787530f66b197a911b7afbf1868cde
- SSDEEP 393216:2c7cSc7cHc7cSc7c7WqQjpyac7cSc7cHc7cSY:tYRY8YRYifjpuYRY8Yt
- TLSH T14D878B17E6A540F5E16E95308BA69332EA73BC120B7097CB43A4D62D1F336D06E39727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_2f4adf80a100b85d5d0ffe21776b3c69_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_2f4adf80a100b85d5d0ffe21776b3c69_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_2f4adf80a100b85d5d0ffe21776b3c69_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 37.4MB
- SHA256 984163974317c243857fd3cdb1c17150505c02229b6dd6e08759046d3228f9a4
- MD5 2f4adf80a100b85d5d0ffe21776b3c69
- SHA1 cb0b1a49fe98376d06f062e492690c969b151737
- SHA512 f7205e7232e5f31cd5c7ee72f06a3538d72b0160113c2c5f98341c2163dd082673e68cc20b1d9e72fae09038ec52bdaa35787530f66b197a911b7afbf1868cde
- SSDEEP 393216:2c7cSc7cHc7cSc7c7WqQjpyac7cSc7cHc7cSY:tYRY8YRYifjpuYRY8Yt
- TLSH T14D878B17E6A540F5E16E95308BA69332EA73BC120B7097CB43A4D62D1F336D06E39727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry