2026-08-18_608131f398cb9400a34c4a4021e12072_cobalt-strike_elex_glassworm_icedid_njrat_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-18_608131f398cb9400a34c4a4021e12072_cobalt-strike_elex_glassworm_icedid_njrat_vidar
Size 6.7MB
Sample260818-sd7daswsdt
SHA256 9157d5b1f5ee10f17793cd873e43c32663604e1c52cabb4fa3c9be9deabe8ad5
MD5 608131f398cb9400a34c4a4021e12072
SHA1 482870010c36ee69097a69eace195c6dbf36f125
SHA512 e770ce416be9ca5a0dc2cb21f01ee0fe34606b922bd1c092ee2c231aaf4231b5b73deb2ef7228f3977f276c6cc6b7c2be89897ef72dae71a88588b64807eefa5
SSDEEP 49152:U+EN+ES+EN+ES+EN+ES+EN+ES+ErMb6LgA97HrsdochZVNhcOgs0F2oHN8kVpiuc:pA91pH2WpjHrgBFFu416AWvc
TLSH
T116665AA5A1A720FDE0AFE079897AC732E6B17C130131934F167CD6562F636286D29733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-18_608131f398cb9400a34c4a4021e12072_cobalt-strike_elex_glassworm_icedid_njrat_vidar

File Explorer

2026-08-18_608131f398cb9400a34c4a4021e12072_cobalt-strike_elex_glassworm_icedid_njrat_vidar

.exe 6.7MB

2026-08-18_608131f398cb9400a34c4a4021e12072_cobalt-strike_elex_glassworm_icedid_njrat_vidar

SHA256 9157d5b1f5ee10f17793cd873e43c32663604e1c52cabb4fa3c9be9deabe8ad5
MD5 608131f398cb9400a34c4a4021e12072
SHA1 482870010c36ee69097a69eace195c6dbf36f125
SHA512 e770ce416be9ca5a0dc2cb21f01ee0fe34606b922bd1c092ee2c231aaf4231b5b73deb2ef7228f3977f276c6cc6b7c2be89897ef72dae71a88588b64807eefa5
SSDEEP 49152:U+EN+ES+EN+ES+EN+ES+EN+ES+ErMb6LgA97HrsdochZVNhcOgs0F2oHN8kVpiuc:pA91pH2WpjHrgBFFu416AWvc
TLSH
T116665AA5A1A720FDE0AFE079897AC732E6B17C130131934F167CD6562F636286D29733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5136

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

52KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/14

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

512B

Virtual Size

181B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/80

Size

512B

Virtual Size

159B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/91

Size

512B

Virtual Size

492B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-18_608131f398cb9400a34c4a4021e12072_cobalt-strike_elex_glassworm_icedid_njrat_vidar

generic