General
- Target 2026-09-19_1ff355a7236cec20617caa54ff0332fd_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.2MB
- Sample260919-ft6eqabf47
- SHA256 43794bec208e3ddb8cbda02ac88efad3f19012da481bac95096ae639c9cfe7eb
- MD5 1ff355a7236cec20617caa54ff0332fd
- SHA1 2fc2544986882660eff8a27e9623fbfce98f88a9
- SHA512 c1c376325a63a60b8f27ac382c5f545d651e4ceeb788bca61f31df424418e8a78ec669eff4e94950fa2e855cb5332f4112a1b5173c483158880593232bb9adb4
- SSDEEP 98304:B0nAAYEp2MchSQA91pH2WpjHrgBFFu416AWvN:WNpNQmHpn6F44IAWvN
- TLSH T101765BA5A6E760FDE0AFD0B5896AC732E6717C130031530F16BCDA562F736286D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-19_1ff355a7236cec20617caa54ff0332fd_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-19_1ff355a7236cec20617caa54ff0332fd_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.2MB
- SHA256 43794bec208e3ddb8cbda02ac88efad3f19012da481bac95096ae639c9cfe7eb
- MD5 1ff355a7236cec20617caa54ff0332fd
- SHA1 2fc2544986882660eff8a27e9623fbfce98f88a9
- SHA512 c1c376325a63a60b8f27ac382c5f545d651e4ceeb788bca61f31df424418e8a78ec669eff4e94950fa2e855cb5332f4112a1b5173c483158880593232bb9adb4
- SSDEEP 98304:B0nAAYEp2MchSQA91pH2WpjHrgBFFu416AWvN:WNpNQmHpn6F44IAWvN
- TLSH T101765BA5A6E760FDE0AFD0B5896AC732E6717C130031530F16BCDA562F736286D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.