General
- Target 2026-08-18_e65c7fee055058ecdbd74bcc206c3517_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 22.4MB
- Sample260818-2rslqsam6s
- SHA256 a086e87ced36548426ba91dff744c09573a4d8fbecc7b5f7dbeec13861d5023a
- MD5 e65c7fee055058ecdbd74bcc206c3517
- SHA1 68d9a8d28a65829e645ca09f516acea4bfdca4c9
- SHA512 e7541ce1e04bcea81367ecf468aed72e818e169515a603c84c34df4e97c13970623f40fd348822ff64430142f3266e388fa8fdb873da70f0a33d9e35776987bf
- SSDEEP 393216:2cOvyEYKbayZ/K0ttYZTFcOvyEYKbayZ/K0ttYZTT:tK4yZ/K0ttYZT+K4yZ/K0ttYZTT
- TLSH T173377D13B7E840F5E06AD134CA768631EB727C164BB1A6DF1250F6992F33AD06E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_e65c7fee055058ecdbd74bcc206c3517_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_e65c7fee055058ecdbd74bcc206c3517_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_e65c7fee055058ecdbd74bcc206c3517_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 22.4MB
- SHA256 a086e87ced36548426ba91dff744c09573a4d8fbecc7b5f7dbeec13861d5023a
- MD5 e65c7fee055058ecdbd74bcc206c3517
- SHA1 68d9a8d28a65829e645ca09f516acea4bfdca4c9
- SHA512 e7541ce1e04bcea81367ecf468aed72e818e169515a603c84c34df4e97c13970623f40fd348822ff64430142f3266e388fa8fdb873da70f0a33d9e35776987bf
- SSDEEP 393216:2cOvyEYKbayZ/K0ttYZTFcOvyEYKbayZ/K0ttYZTT:tK4yZ/K0ttYZT+K4yZ/K0ttYZTT
- TLSH T173377D13B7E840F5E06AD134CA768631EB727C164BB1A6DF1250F6992F33AD06E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application