General
- Target 2026-08-20_930a1372fdbc0d317f52a3c308a40a4b_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 36.5MB
- Sample260820-gdatjser7w
- SHA256 cc174f0c9b1c605dc09e8c2e054b510db72edd469496ade04e333acd05c42fed
- MD5 930a1372fdbc0d317f52a3c308a40a4b
- SHA1 d0a60a0640f34cd2bca3bef7da1647a530d86f27
- SHA512 4fa5dda79e8321da8f644ae35c12816fba591ddb579553ba3054f9d91e5d022fc657873005925bccd0e579bb66d6e8165006533f7edbdc5aed7b6181955f8ff9
- SSDEEP 393216:2c7cSc7cHc7cSc7cqc7cSc7cHc7cSc7cUD:tYRY8YRYpYRY8YRYq
- TLSH T1A5878C17E69440F5D16E95308BAA9232FB73B8120B7197CB43A4C62D1F336D06E7A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_930a1372fdbc0d317f52a3c308a40a4b_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_930a1372fdbc0d317f52a3c308a40a4b_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_930a1372fdbc0d317f52a3c308a40a4b_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 36.5MB
- SHA256 cc174f0c9b1c605dc09e8c2e054b510db72edd469496ade04e333acd05c42fed
- MD5 930a1372fdbc0d317f52a3c308a40a4b
- SHA1 d0a60a0640f34cd2bca3bef7da1647a530d86f27
- SHA512 4fa5dda79e8321da8f644ae35c12816fba591ddb579553ba3054f9d91e5d022fc657873005925bccd0e579bb66d6e8165006533f7edbdc5aed7b6181955f8ff9
- SSDEEP 393216:2c7cSc7cHc7cSc7cqc7cSc7cHc7cSc7cUD:tYRY8YRYpYRY8YRYq
- TLSH T1A5878C17E69440F5D16E95308BAA9232FB73B8120B7197CB43A4C62D1F336D06E7A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application