General
- Target 2026-09-10_24452dea748ba068cc9082b5ad1f899e_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- Sample260910-xlafraxsc1
- SHA256 f5bc3f0710bcce39d0ec808f50cf6f0121e2ad3377971b5e7e22f4ab6966a6c8
- MD5 24452dea748ba068cc9082b5ad1f899e
- SHA1 e410990d6a4d03b279bea9b11dc8a3970ac5c063
- SHA512 e4c2e0ec5c3f4c3062a8436bc2ae941d4d218178ecd6107c4524d016a9a2dc5d40e88149f5c57aa65f720a818689e44e118a3c403ab80873c14771aea66ab557
- SSDEEP 98304:m0nAAYEp9h9A91pH2WpjHrgBFFu416AWv6:LNXmHpn6F44IAWv6
- TLSH T198765BA5A2A761FDE0AFD075892AC732E6727C130431534B16BCEA563F736182D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_24452dea748ba068cc9082b5ad1f899e_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_24452dea748ba068cc9082b5ad1f899e_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- SHA256 f5bc3f0710bcce39d0ec808f50cf6f0121e2ad3377971b5e7e22f4ab6966a6c8
- MD5 24452dea748ba068cc9082b5ad1f899e
- SHA1 e410990d6a4d03b279bea9b11dc8a3970ac5c063
- SHA512 e4c2e0ec5c3f4c3062a8436bc2ae941d4d218178ecd6107c4524d016a9a2dc5d40e88149f5c57aa65f720a818689e44e118a3c403ab80873c14771aea66ab557
- SSDEEP 98304:m0nAAYEp9h9A91pH2WpjHrgBFFu416AWv6:LNXmHpn6F44IAWv6
- TLSH T198765BA5A2A761FDE0AFD075892AC732E6727C130431534B16BCEA563F736182D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE