General
- Target 2026-08-20_5840231e7b7e0a4b1898e7a4cfb5b4ca_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 15.5MB
- Sample260820-pxvxtszzdt
- SHA256 94d4cd46b29aa73d6f462f907b5a78904a87d9a4728ed8521bfb25c68a6e18ca
- MD5 5840231e7b7e0a4b1898e7a4cfb5b4ca
- SHA1 c3d2eca12a2f69113099afe6ae04760124aec884
- SHA512 bca8bfe4e49e5a3471743a7d6ae345ff340d83947bfe071b4d29f95876211b582021b495be635c04d77c82dcf46554f540fa2bd35459ead1abafab83bca18dc5
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCCvyEYc/b3w8O:2cDcKcDcOCvyEYKbi
- TLSH T1E3F67C16EBA440F5D16ED5348A668632FB727C120B719BCF4290F62E2F336D05E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_5840231e7b7e0a4b1898e7a4cfb5b4ca_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_5840231e7b7e0a4b1898e7a4cfb5b4ca_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_5840231e7b7e0a4b1898e7a4cfb5b4ca_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 15.5MB
- SHA256 94d4cd46b29aa73d6f462f907b5a78904a87d9a4728ed8521bfb25c68a6e18ca
- MD5 5840231e7b7e0a4b1898e7a4cfb5b4ca
- SHA1 c3d2eca12a2f69113099afe6ae04760124aec884
- SHA512 bca8bfe4e49e5a3471743a7d6ae345ff340d83947bfe071b4d29f95876211b582021b495be635c04d77c82dcf46554f540fa2bd35459ead1abafab83bca18dc5
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCCvyEYc/b3w8O:2cDcKcDcOCvyEYKbi
- TLSH T1E3F67C16EBA440F5D16ED5348A668632FB727C120B719BCF4290F62E2F336D05E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application