General
- Target 2026-08-27_e003cb0cfb2e0e0fc54449f2b11754b1_cobalt-strike_elex_glassworm_icedid_njrat_remcos_vidar
- Size 3.0MB
- Sample260828-evvtyatape
- SHA256 4b7b5e0f7ebf0df55491dbcbf87b74558f14926c0b8f8f4d376e9d62860c41fa
- MD5 e003cb0cfb2e0e0fc54449f2b11754b1
- SHA1 d64c4963cb9cf5876d99d601448a9e0785dd496c
- SHA512 7d473cedf6abf20dc9df0865dc9b376ccb829f2f2806c689a49bd7c1d4db59400c59682d1676612b74f8c97ec04cbd9eb7c374b62edbb095c68cf175d5697a9b
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatgluDWW1PszNsehO9Kwq7Z:TID41vyW1Psznv
- TLSH T1F7E57B41F3E448A2E1BB1231CA7251512A77B9210B64D28F23D4D67E5F337C0AEB6B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_e003cb0cfb2e0e0fc54449f2b11754b1_cobalt-strike_elex_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_e003cb0cfb2e0e0fc54449f2b11754b1_cobalt-strike_elex_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_e003cb0cfb2e0e0fc54449f2b11754b1_cobalt-strike_elex_glassworm_icedid_njrat_remcos_vidar
- Size 3.0MB
- SHA256 4b7b5e0f7ebf0df55491dbcbf87b74558f14926c0b8f8f4d376e9d62860c41fa
- MD5 e003cb0cfb2e0e0fc54449f2b11754b1
- SHA1 d64c4963cb9cf5876d99d601448a9e0785dd496c
- SHA512 7d473cedf6abf20dc9df0865dc9b376ccb829f2f2806c689a49bd7c1d4db59400c59682d1676612b74f8c97ec04cbd9eb7c374b62edbb095c68cf175d5697a9b
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatgluDWW1PszNsehO9Kwq7Z:TID41vyW1Psznv
- TLSH T1F7E57B41F3E448A2E1BB1231CA7251512A77B9210B64D28F23D4D67E5F337C0AEB6B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory