General
- Target 2026-09-10_78a2dcfef443913a33df0312be06732c_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- Sample260910-sffy5adk5y
- SHA256 6adc0c350f18bef572c32b374c749709e81bfea320485702844696d9c4d5b8c9
- MD5 78a2dcfef443913a33df0312be06732c
- SHA1 6ad3b43689f4a39a37e904bc43f75f57bdf4c768
- SHA512 8db94e14220778f7f6642e23856754dadeb6001463a21f6437c47bdf09f138bd38eed126fdacb77c1b5d3dea8ffdb9dd6001ec51de72753c3cd0e57197442e9d
- SSDEEP 98304:H0nAAYEpRh6QA91pH2WpjHrgBFFu416AWv0:UNcQmHpn6F44IAWv0
- TLSH T1AA765BA5A2A761FDE0AFD075892AC732E6717C130031570B26BCEA563F736186D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_78a2dcfef443913a33df0312be06732c_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_78a2dcfef443913a33df0312be06732c_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- SHA256 6adc0c350f18bef572c32b374c749709e81bfea320485702844696d9c4d5b8c9
- MD5 78a2dcfef443913a33df0312be06732c
- SHA1 6ad3b43689f4a39a37e904bc43f75f57bdf4c768
- SHA512 8db94e14220778f7f6642e23856754dadeb6001463a21f6437c47bdf09f138bd38eed126fdacb77c1b5d3dea8ffdb9dd6001ec51de72753c3cd0e57197442e9d
- SSDEEP 98304:H0nAAYEpRh6QA91pH2WpjHrgBFFu416AWv0:UNcQmHpn6F44IAWv0
- TLSH T1AA765BA5A2A761FDE0AFD075892AC732E6717C130031570B26BCEA563F736186D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE