General
- Target 2026-09-28_71a31a29b587f335c4cfba23029698db_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.4MB
- Sample260928-sapdbabd33
- SHA256 75bb5621ca1c405b86b2801388b384a0ceb7cba161403caca5bf38f44eddde25
- MD5 71a31a29b587f335c4cfba23029698db
- SHA1 49611e94a0c371c4e1c36cf4c49c7d93c409d04d
- SHA512 bcf8a4bc7638e5d8fdb37194e8713262a6f625bc41396e46f2b0a8a40f6667ac43fcacfba44ac654622e10cf2b0204b252bc1044a8fb0de2e9115951e3abb001
- SSDEEP 98304:z0nAAYEpMzhGQA91pH2WpjHrgBFFu416AWva:QNqsQmHpn6F44IAWva
- TLSH T174764AA562A7A0FCE46ED075CB2A8772E6713C274071930B16BCFA563F736142D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-28_71a31a29b587f335c4cfba23029698db_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-28_71a31a29b587f335c4cfba23029698db_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.4MB
- SHA256 75bb5621ca1c405b86b2801388b384a0ceb7cba161403caca5bf38f44eddde25
- MD5 71a31a29b587f335c4cfba23029698db
- SHA1 49611e94a0c371c4e1c36cf4c49c7d93c409d04d
- SHA512 bcf8a4bc7638e5d8fdb37194e8713262a6f625bc41396e46f2b0a8a40f6667ac43fcacfba44ac654622e10cf2b0204b252bc1044a8fb0de2e9115951e3abb001
- SSDEEP 98304:z0nAAYEpMzhGQA91pH2WpjHrgBFFu416AWva:QNqsQmHpn6F44IAWva
- TLSH T174764AA562A7A0FCE46ED075CB2A8772E6713C274071930B16BCFA563F736142D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE