General
- Target 2026-09-08_12f97184d180056fc7449eb00e31d508_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 9.5MB
- Sample260910-h9w74aga72
- SHA256 fa63550ee00db78c86990201c5856424a18c1388ecaf4054c193dd0ed623a4bf
- MD5 12f97184d180056fc7449eb00e31d508
- SHA1 b6a3574500e2a11060395cc8b15ff412e106e00f
- SHA512 8e1cdd0972c3054f31e36c379732c11c3d3dc74b5ce4b92c1489283e8593b8ba87224211858da5872999569237758dc18e1e6e2beb3c0dbecca5789c7a8e6df3
- SSDEEP 98304:q5N5d5N52J5N5d5N52rA91pH2WpjHrgBFFu416AWvI:q5N5d5N5K5N5d5N5MmHpn6F44IAWvI
- TLSH T1B3A66CA8B69720E9D56FD0B5886AC3B2EE703C130331475F567CE6562F236D0AD2D722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_12f97184d180056fc7449eb00e31d508_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_12f97184d180056fc7449eb00e31d508_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_12f97184d180056fc7449eb00e31d508_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 9.5MB
- SHA256 fa63550ee00db78c86990201c5856424a18c1388ecaf4054c193dd0ed623a4bf
- MD5 12f97184d180056fc7449eb00e31d508
- SHA1 b6a3574500e2a11060395cc8b15ff412e106e00f
- SHA512 8e1cdd0972c3054f31e36c379732c11c3d3dc74b5ce4b92c1489283e8593b8ba87224211858da5872999569237758dc18e1e6e2beb3c0dbecca5789c7a8e6df3
- SSDEEP 98304:q5N5d5N52J5N5d5N52rA91pH2WpjHrgBFFu416AWvI:q5N5d5N5K5N5d5N5MmHpn6F44IAWvI
- TLSH T1B3A66CA8B69720E9D56FD0B5886AC3B2EE703C130331475F567CE6562F236D0AD2D722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1