General
- Target 2026-09-07_b377e48a7c1332351a4295290e48f959_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- Sample260908-jta6csvfjh
- SHA256 53b5096e7c66718546bdf663817abc886d1fdf0823f53c3fc89f58e378905b01
- MD5 b377e48a7c1332351a4295290e48f959
- SHA1 b7caf255927a5c272481945b985591ab40ed0d4c
- SHA512 683e0466c0534daaf2056042f6ba94d6cb21601bcb3c4bd4ade46ec8740d0fe0f392c3cde08e57ee727a1a810cfc0ba41df44630aeea0192c739d8e4340f8049
- SSDEEP 98304:b0nAAYEpJzhdQA91pH2WpjHrgBFFu416AWv0:INfvQmHpn6F44IAWv0
- TLSH T13C766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_b377e48a7c1332351a4295290e48f959_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_b377e48a7c1332351a4295290e48f959_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- SHA256 53b5096e7c66718546bdf663817abc886d1fdf0823f53c3fc89f58e378905b01
- MD5 b377e48a7c1332351a4295290e48f959
- SHA1 b7caf255927a5c272481945b985591ab40ed0d4c
- SHA512 683e0466c0534daaf2056042f6ba94d6cb21601bcb3c4bd4ade46ec8740d0fe0f392c3cde08e57ee727a1a810cfc0ba41df44630aeea0192c739d8e4340f8049
- SSDEEP 98304:b0nAAYEpJzhdQA91pH2WpjHrgBFFu416AWv0:INfvQmHpn6F44IAWv0
- TLSH T13C766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE