General
- Target 2026-08-18_c168fcfa11c710ea7ef65e19fff30532_cobalt-strike_elex_emotet_glassworm_icedid_remcos_stealc_vidar
- Size 29.7MB
- Sample260818-22esmaan9v
- SHA256 fdc1ef83636ae21feda11892dc380f2ce2f5ccd6e29d018f9b4f6c0cdef0e301
- MD5 c168fcfa11c710ea7ef65e19fff30532
- SHA1 4c2bf4efdb21602193ebcdab2a9808c157eccd3b
- SHA512 67446e0584d18a0dec5f02bd9324170977de5c4f140d94ea21cf95f0a8e5177d39f29b845d5f89c50e65915a7ecce6299b70218781ec4c9c8565461ae6af1ccf
- SSDEEP 196608:Qi8kLri8kLfUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:IkLDkLfUEtQevvqc2W1cpV2XI32i
- TLSH T17E675A91BBE443E2E3AA953485B582B2EB71BC0E1F31937F1179F21E1E376905D25322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_c168fcfa11c710ea7ef65e19fff30532_cobalt-strike_elex_emotet_glassworm_icedid_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_c168fcfa11c710ea7ef65e19fff30532_cobalt-strike_elex_emotet_glassworm_icedid_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_c168fcfa11c710ea7ef65e19fff30532_cobalt-strike_elex_emotet_glassworm_icedid_remcos_stealc_vidar
- Size 29.7MB
- SHA256 fdc1ef83636ae21feda11892dc380f2ce2f5ccd6e29d018f9b4f6c0cdef0e301
- MD5 c168fcfa11c710ea7ef65e19fff30532
- SHA1 4c2bf4efdb21602193ebcdab2a9808c157eccd3b
- SHA512 67446e0584d18a0dec5f02bd9324170977de5c4f140d94ea21cf95f0a8e5177d39f29b845d5f89c50e65915a7ecce6299b70218781ec4c9c8565461ae6af1ccf
- SSDEEP 196608:Qi8kLri8kLfUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:IkLDkLfUEtQevvqc2W1cpV2XI32i
- TLSH T17E675A91BBE443E2E3AA953485B582B2EB71BC0E1F31937F1179F21E1E376905D25322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry