General
- Target 2026-09-16_2109ef15f38bdb1f6b58fd12b660dfb6_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.2MB
- Sample260916-heaevagk3w
- SHA256 0c9872124ad04d080b82104d17b8b156d659f11c39c43e0fae6434895871af96
- MD5 2109ef15f38bdb1f6b58fd12b660dfb6
- SHA1 55a28e0cd844be0f5e4f8be8f07b8f1f8519e378
- SHA512 98a8c6258dac59a1060f23d0177877a8d5c6ebf4bb08a4690ce09b4d7c4b1ed50c0f4f827e99500f21105cf60373be9f30f87a48faea8411ac6617d2b86757eb
- SSDEEP 98304:O0nAAYEpeh3QA91pH2WpjHrgBFFu416AWvc:DNoQmHpn6F44IAWvc
- TLSH T103766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_2109ef15f38bdb1f6b58fd12b660dfb6_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_2109ef15f38bdb1f6b58fd12b660dfb6_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.2MB
- SHA256 0c9872124ad04d080b82104d17b8b156d659f11c39c43e0fae6434895871af96
- MD5 2109ef15f38bdb1f6b58fd12b660dfb6
- SHA1 55a28e0cd844be0f5e4f8be8f07b8f1f8519e378
- SHA512 98a8c6258dac59a1060f23d0177877a8d5c6ebf4bb08a4690ce09b4d7c4b1ed50c0f4f827e99500f21105cf60373be9f30f87a48faea8411ac6617d2b86757eb
- SSDEEP 98304:O0nAAYEpeh3QA91pH2WpjHrgBFFu416AWvc:DNoQmHpn6F44IAWvc
- TLSH T103766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE