General
- Target 2026-09-10_61485d4dcced3017c6df85bb97991ae9_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.2MB
- Sample260910-tpfv6avsdz
- SHA256 2d8518172af9205b4f21029fb64ce78a00d492a380f7bb86746c9a9c3dfd357b
- MD5 61485d4dcced3017c6df85bb97991ae9
- SHA1 db6977060deee7f89f73019f7581ae7b047d3c54
- SHA512 5d4e75f5fe471efc4d07918f484f8c0e25fa8d16c31df34c8bc1cea49ce39c1cb571d7b2d416ca8cef48e881d40b917fd680c76c6a50d494e78f7998efd92896
- SSDEEP 98304:e0nAAYEpwhnQA91pH2WpjHrgBFFu416AWva:zNWQmHpn6F44IAWva
- TLSH T1F1766BA5A2A761FDE0AFD075892AC732E6717C130431934B16BCEA563F736182D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_61485d4dcced3017c6df85bb97991ae9_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_61485d4dcced3017c6df85bb97991ae9_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.2MB
- SHA256 2d8518172af9205b4f21029fb64ce78a00d492a380f7bb86746c9a9c3dfd357b
- MD5 61485d4dcced3017c6df85bb97991ae9
- SHA1 db6977060deee7f89f73019f7581ae7b047d3c54
- SHA512 5d4e75f5fe471efc4d07918f484f8c0e25fa8d16c31df34c8bc1cea49ce39c1cb571d7b2d416ca8cef48e881d40b917fd680c76c6a50d494e78f7998efd92896
- SSDEEP 98304:e0nAAYEpwhnQA91pH2WpjHrgBFFu416AWva:zNWQmHpn6F44IAWva
- TLSH T1F1766BA5A2A761FDE0AFD075892AC732E6717C130431934B16BCEA563F736182D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE