General
- Target 2026-08-19_05b77096681d7b8a28deb9073c585bcb_cobalt-strike_elex_glassworm_icedid_njrat_stealc_strictor_vidar_wannacry
- Size 9.8MB
- Sample260819-hd6fwsdf45
- SHA256 124940f40b56724da3a77a838ece6a7ef26ad44e69c84237eee561914f4672db
- MD5 05b77096681d7b8a28deb9073c585bcb
- SHA1 a1ce956b594cc093505cd712c01116ddba6785a7
- SHA512 52affcfef048ad7c905136984290d096de9e81e15ba229c8e465605795331ca447d964e7a26f30b5fd4575e2ed47e8dd14c5d377fed5e1f8c0f5dc3837647c67
- SSDEEP 98304:d4n9muEF1z3le3uM5xbbRiCdhwYHZbyzKuWpg2lUYr:m9muEHz3le+MRxEz/Yr
- TLSH T195A6290F236691DED077D13CD5112FC0E17F782647629ACB039019EA6DABAE88F7D621
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_05b77096681d7b8a28deb9073c585bcb_cobalt-strike_elex_glassworm_icedid_njrat_stealc_strictor_vidar_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_05b77096681d7b8a28deb9073c585bcb_cobalt-strike_elex_glassworm_icedid_njrat_stealc_strictor_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_05b77096681d7b8a28deb9073c585bcb_cobalt-strike_elex_glassworm_icedid_njrat_stealc_strictor_vidar_wannacry
- Size 9.8MB
- SHA256 124940f40b56724da3a77a838ece6a7ef26ad44e69c84237eee561914f4672db
- MD5 05b77096681d7b8a28deb9073c585bcb
- SHA1 a1ce956b594cc093505cd712c01116ddba6785a7
- SHA512 52affcfef048ad7c905136984290d096de9e81e15ba229c8e465605795331ca447d964e7a26f30b5fd4575e2ed47e8dd14c5d377fed5e1f8c0f5dc3837647c67
- SSDEEP 98304:d4n9muEF1z3le3uM5xbbRiCdhwYHZbyzKuWpg2lUYr:m9muEHz3le+MRxEz/Yr
- TLSH T195A6290F236691DED077D13CD5112FC0E17F782647629ACB039019EA6DABAE88F7D621
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.