General
- Target 2026-09-07_5b0960efed6fd34ac9cf2199a40449c3_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.2MB
- Sample260909-bb2llazfne
- SHA256 031f3ffde1147ff8d6172051529c2ee59e6454ea0eecb38ad78e7dbf9e3eb85b
- MD5 5b0960efed6fd34ac9cf2199a40449c3
- SHA1 491033aa956a9ed816f56c202c2fffefdf594185
- SHA512 66cf637d8b9f0282751691b878dbceeea8e6d87e52fa5bed34579af33d41018b87aeb68f4d15f7010d0c8c4ab46aa7daae88add2a7d5ba432b9ed4c7be3d777e
- SSDEEP 98304:a0nAAYEp4hoQA91pH2WpjHrgBFFu416AWvB:vNlQmHpn6F44IAWvB
- TLSH T185765BA5A6A760FDE0AFE075892BD732E6717C130031570F16BCEA562F736182D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_5b0960efed6fd34ac9cf2199a40449c3_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_5b0960efed6fd34ac9cf2199a40449c3_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.2MB
- SHA256 031f3ffde1147ff8d6172051529c2ee59e6454ea0eecb38ad78e7dbf9e3eb85b
- MD5 5b0960efed6fd34ac9cf2199a40449c3
- SHA1 491033aa956a9ed816f56c202c2fffefdf594185
- SHA512 66cf637d8b9f0282751691b878dbceeea8e6d87e52fa5bed34579af33d41018b87aeb68f4d15f7010d0c8c4ab46aa7daae88add2a7d5ba432b9ed4c7be3d777e
- SSDEEP 98304:a0nAAYEp4hoQA91pH2WpjHrgBFFu416AWvB:vNlQmHpn6F44IAWvB
- TLSH T185765BA5A6A760FDE0AFE075892BD732E6717C130031570F16BCEA562F736182D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE