General
- Target 2026-09-05_67b4bd8e082cbe5a25ec6e9fcb0a2d7f_cobalt-strike_elex_glassworm_icedid_njrat_vidar_wannacry
- Size 30.5MB
- Sample260907-x342pafk2t
- SHA256 f16b9b884e943fef4a2223f6d3ed48cd8d3704926a65c96ecdc620f56f0067b0
- MD5 67b4bd8e082cbe5a25ec6e9fcb0a2d7f
- SHA1 b2356718ebf954fd94409dd51e4390e560dfc699
- SHA512 2525ada7c04c649a1249349c13df7ed2a55f3f3e20cc4a304f91158d64569411bf78a59d2e6379057b18b4c9118bd130196f7a18e7fda973175d1911fb2fb40d
- SSDEEP 786432:e5U5U5U5U5U5U5U5f5U5U5U5U5U5U5U5Mbr6:Xbr6
- TLSH T19C672B19F94350F1D92B50B04CCBD3BFDA707A2183224FEBEA5DCB576D23AA16C29215
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_67b4bd8e082cbe5a25ec6e9fcb0a2d7f_cobalt-strike_elex_glassworm_icedid_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_67b4bd8e082cbe5a25ec6e9fcb0a2d7f_cobalt-strike_elex_glassworm_icedid_njrat_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_67b4bd8e082cbe5a25ec6e9fcb0a2d7f_cobalt-strike_elex_glassworm_icedid_njrat_vidar_wannacry
- Size 30.5MB
- SHA256 f16b9b884e943fef4a2223f6d3ed48cd8d3704926a65c96ecdc620f56f0067b0
- MD5 67b4bd8e082cbe5a25ec6e9fcb0a2d7f
- SHA1 b2356718ebf954fd94409dd51e4390e560dfc699
- SHA512 2525ada7c04c649a1249349c13df7ed2a55f3f3e20cc4a304f91158d64569411bf78a59d2e6379057b18b4c9118bd130196f7a18e7fda973175d1911fb2fb40d
- SSDEEP 786432:e5U5U5U5U5U5U5U5f5U5U5U5U5U5U5U5Mbr6:Xbr6
- TLSH T19C672B19F94350F1D92B50B04CCBD3BFDA707A2183224FEBEA5DCB576D23AA16C29215
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1