f18f3f37979c38d2ffaf9f91c656f3aff2956c7992b8c72e7f6c61044be60150 | Triage™

Login
Reports

Overview

overview

6

Static

static

3

2026-08-30...ar.exe

windows10-2004-x64

6

2026-08-30...ar.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-30_5b80345dfa89ccfa4ce9a41b6bdd7d15_asyncrat_cobalt-strike_elex_glassworm_icedid_vidar
Size 288KB
Sample260831-mz1vrazfre
SHA256 f18f3f37979c38d2ffaf9f91c656f3aff2956c7992b8c72e7f6c61044be60150
MD5 5b80345dfa89ccfa4ce9a41b6bdd7d15
SHA1 5585c77c93ae8d954ad00cf6d616a9dfb204b337
SHA512 9d236fdca7496d32574e7261de4f5d3c43c8fe76c039244a281d2275ac2ae8f3a195ebd2d009be6c86e4f944197e949b20b4bafd10df0e5a7947844ff57f7080
SSDEEP 6144:xqF+9Y5Ws8zNJfx/5bTgVziHzZnSKrCbYMTAmgby8aq:cF3MsW/5/gVziHlBrCbYS8z
TLSH
T18A54A18B6E8002F7D66DE23444B3772D637BF43D2B928F9E8A5A6D590F733885C15680
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-30_5b80345dfa89ccfa4ce9a41b6bdd7d15_asyncrat_cobalt-strike_elex_glassworm_icedid_vidar.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

defense_evasion persistence privilege_escalation

Behavioral task

behavioral2

Sample

2026-08-30_5b80345dfa89ccfa4ce9a41b6bdd7d15_asyncrat_cobalt-strike_elex_glassworm_icedid_vidar.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

defense_evasion persistence privilege_escalation

Malware Config

Targets

- Target
  2026-08-30_5b80345dfa89ccfa4ce9a41b6bdd7d15_asyncrat_cobalt-strike_elex_glassworm_icedid_vidar
- Size 288KB
- SHA256 f18f3f37979c38d2ffaf9f91c656f3aff2956c7992b8c72e7f6c61044be60150
- MD5 5b80345dfa89ccfa4ce9a41b6bdd7d15
- SHA1 5585c77c93ae8d954ad00cf6d616a9dfb204b337
- SHA512 9d236fdca7496d32574e7261de4f5d3c43c8fe76c039244a281d2275ac2ae8f3a195ebd2d009be6c86e4f944197e949b20b4bafd10df0e5a7947844ff57f7080
- SSDEEP 6144:xqF+9Y5Ws8zNJfx/5bTgVziHzZnSKrCbYMTAmgby8aq:cF3MsW/5/gVziHlBrCbYS8z
- TLSH
  T18A54A18B6E8002F7D66DE23444B3772D637BF43D2B928F9E8A5A6D590F733885C15680
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion persistence privilege_escalation
- Abuse Elevation Control Mechanism: Bypass User Account Control
  UAC Bypass Attempt via SilentCleanup Task.
  defense_evasion privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionpersistenceprivilege_escalation

behavioral2

defense_evasionpersistenceprivilege_escalation

© 2018-2026

Terms | Privacy