General
- Target 2026-08-28_81cee9eee3b2ab449ffc351c0f6745a2_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 2.6MB
- Sample260828-qhdwfayapf
- SHA256 0fd9f4641cc9e573e7cf9d85a753262ba82866dbb18abd0b05add566065874a4
- MD5 81cee9eee3b2ab449ffc351c0f6745a2
- SHA1 a37670ea25c6bed37966c287414ac5792be894ad
- SHA512 63580f14ca0a3a106f09f9aa3609220763b29b50d36c06da4b2e00a089d40dd1c1d2a30097db0ebec54e25ab49f1b0ff7be5a09ed43566a0e2ed1a49d901d071
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatgluDWW1PszNsehO9dbhOA:TID41vyW1Pszncj
- TLSH T1D2C58D06B7D554F6E5B3123189364262AA76B8211F21D7CF2390927D9F33BC0AF35B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_81cee9eee3b2ab449ffc351c0f6745a2_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_81cee9eee3b2ab449ffc351c0f6745a2_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_81cee9eee3b2ab449ffc351c0f6745a2_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 2.6MB
- SHA256 0fd9f4641cc9e573e7cf9d85a753262ba82866dbb18abd0b05add566065874a4
- MD5 81cee9eee3b2ab449ffc351c0f6745a2
- SHA1 a37670ea25c6bed37966c287414ac5792be894ad
- SHA512 63580f14ca0a3a106f09f9aa3609220763b29b50d36c06da4b2e00a089d40dd1c1d2a30097db0ebec54e25ab49f1b0ff7be5a09ed43566a0e2ed1a49d901d071
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatgluDWW1PszNsehO9dbhOA:TID41vyW1Pszncj
- TLSH T1D2C58D06B7D554F6E5B3123189364262AA76B8211F21D7CF2390927D9F33BC0AF35B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory