General
- Target 2026-09-21_a51caf36351b6de83c773fff9cbd0f61_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar
- Size 8.1MB
- Sample260922-m5f3jacf94
- SHA256 2b114c9434b9cad082dda14e0e51b56c3f77d87e6f9741eac45ba2550d11f703
- MD5 a51caf36351b6de83c773fff9cbd0f61
- SHA1 c442b652bef9683a2ed34acfd1e14fcf5d9989a9
- SHA512 329f9975a78f1e567b6645c65ada80e018b98f5786298d1f577eb982ad0a73b7858edf23f9f0622df9afb6a6c46f6171e14c22127d0ea06be039629abd5bbf34
- SSDEEP 196608:Eo28C4CKCsXDj+dJolpPgToa10/J48RmU/ITviZlsPvpEbPxFOnJ6XrXjn:N9tCEAJ83a10RtNITaZWqDxssrr
- TLSH T151863382BF9014A8E817927898F08D2BFAB23C3207649E5B5FB519411D732D6FE79317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_a51caf36351b6de83c773fff9cbd0f61_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-21_a51caf36351b6de83c773fff9cbd0f61_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_a51caf36351b6de83c773fff9cbd0f61_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar
- Size 8.1MB
- SHA256 2b114c9434b9cad082dda14e0e51b56c3f77d87e6f9741eac45ba2550d11f703
- MD5 a51caf36351b6de83c773fff9cbd0f61
- SHA1 c442b652bef9683a2ed34acfd1e14fcf5d9989a9
- SHA512 329f9975a78f1e567b6645c65ada80e018b98f5786298d1f577eb982ad0a73b7858edf23f9f0622df9afb6a6c46f6171e14c22127d0ea06be039629abd5bbf34
- SSDEEP 196608:Eo28C4CKCsXDj+dJolpPgToa10/J48RmU/ITviZlsPvpEbPxFOnJ6XrXjn:N9tCEAJ83a10RtNITaZWqDxssrr
- TLSH T151863382BF9014A8E817927898F08D2BFAB23C3207649E5B5FB519411D732D6FE79317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory