General
- Target 2026-08-21_d62129862cfcc02edc5301d77c80a5a7_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 30.5MB
- Sample260821-efejeasclc
- SHA256 d6f7cb85ef048d9085bfbf29ab4cf4c6970e133d0f8ec56712421e8b8b73f0f3
- MD5 d62129862cfcc02edc5301d77c80a5a7
- SHA1 2d59818227726cd537748fc349c7bcdc0deded35
- SHA512 36879e168c9c6d0145daac6fcdbff8b76a8452c93413c50d855b82824bbe48e7dcbccf00183ed39d746f7ac452df215170df5d8cd504a7acdbffc6697e3fbe6d
- SSDEEP 393216:2cDcKcDcOyvyEYKb7cDcKcDcOyvyEYKbX:tAJAjaAJAjp
- TLSH T12D677C16EBA440F5E16ED5348A668672F7727C120B719BCF0290F62E2F336D05E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_d62129862cfcc02edc5301d77c80a5a7_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_d62129862cfcc02edc5301d77c80a5a7_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_d62129862cfcc02edc5301d77c80a5a7_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 30.5MB
- SHA256 d6f7cb85ef048d9085bfbf29ab4cf4c6970e133d0f8ec56712421e8b8b73f0f3
- MD5 d62129862cfcc02edc5301d77c80a5a7
- SHA1 2d59818227726cd537748fc349c7bcdc0deded35
- SHA512 36879e168c9c6d0145daac6fcdbff8b76a8452c93413c50d855b82824bbe48e7dcbccf00183ed39d746f7ac452df215170df5d8cd504a7acdbffc6697e3fbe6d
- SSDEEP 393216:2cDcKcDcOyvyEYKb7cDcKcDcOyvyEYKbX:tAJAjaAJAjp
- TLSH T12D677C16EBA440F5E16ED5348A668672F7727C120B719BCF0290F62E2F336D05E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application