General
- Target 2026-09-08_41af3c7e9cff5b98cda7213375f068c7_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 5.4MB
- Sample260908-v8m91sha49
- SHA256 ef98dcba30003a43f4f36946c0a64c9b6cfe59206f170ec63357e14a13b3ddd4
- MD5 41af3c7e9cff5b98cda7213375f068c7
- SHA1 8035fa36eff563a407c5b82b2759eda0e8c9cc6e
- SHA512 5446312837e5983e59f3265137a5dbc55c947a8e13e079da3ce4f49dcd4454f692bec731eada1b4d1adc0fd0c8445ed971c44431c81c5085210427a193f4b8e4
- SSDEEP 98304:njBxcO4EY+vWQtZ/K0tGOFWVRuLftCT2g:njBxcO4OvWyZ/K0ttYVAAT2g
- TLSH T12B466C03F2E541A8E0AAD178CF369632DB72BC594BF1A5DF224076D51E72AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_41af3c7e9cff5b98cda7213375f068c7_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_41af3c7e9cff5b98cda7213375f068c7_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_41af3c7e9cff5b98cda7213375f068c7_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 5.4MB
- SHA256 ef98dcba30003a43f4f36946c0a64c9b6cfe59206f170ec63357e14a13b3ddd4
- MD5 41af3c7e9cff5b98cda7213375f068c7
- SHA1 8035fa36eff563a407c5b82b2759eda0e8c9cc6e
- SHA512 5446312837e5983e59f3265137a5dbc55c947a8e13e079da3ce4f49dcd4454f692bec731eada1b4d1adc0fd0c8445ed971c44431c81c5085210427a193f4b8e4
- SSDEEP 98304:njBxcO4EY+vWQtZ/K0tGOFWVRuLftCT2g:njBxcO4OvWyZ/K0ttYVAAT2g
- TLSH T12B466C03F2E541A8E0AAD178CF369632DB72BC594BF1A5DF224076D51E72AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory