General
- Target 2026-09-27_1d0d6ef0647f5f8fdce491724d494274_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- Sample260928-y79cmsty7j
- SHA256 35ed6dc1c99b8faec9a6ca1fdfbc2f7eb68eb655afc74ccf01ddce406f22cf11
- MD5 1d0d6ef0647f5f8fdce491724d494274
- SHA1 ea0c3972dd3dc8faea64b21e1e58a908f0bc59b1
- SHA512 633b174c1f2c8d2f83576b065e8e670577dcc017c2afb1b40bb597b2f6999ae811c4584c5d38a55645cd7772d18af8ac290e153a70e69a967195b12b23751fd8
- SSDEEP 98304:N0nAAYEpJtXh9QA91pH2WpjHrgBFFu416AWvB:yNztDQmHpn6F44IAWvB
- TLSH T174766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-27_1d0d6ef0647f5f8fdce491724d494274_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-27_1d0d6ef0647f5f8fdce491724d494274_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.1MB
- SHA256 35ed6dc1c99b8faec9a6ca1fdfbc2f7eb68eb655afc74ccf01ddce406f22cf11
- MD5 1d0d6ef0647f5f8fdce491724d494274
- SHA1 ea0c3972dd3dc8faea64b21e1e58a908f0bc59b1
- SHA512 633b174c1f2c8d2f83576b065e8e670577dcc017c2afb1b40bb597b2f6999ae811c4584c5d38a55645cd7772d18af8ac290e153a70e69a967195b12b23751fd8
- SSDEEP 98304:N0nAAYEpJtXh9QA91pH2WpjHrgBFFu416AWvB:yNztDQmHpn6F44IAWvB
- TLSH T174766CA5A2A760FDE4AFD075892AC732E6717C130031970F16BCDA563F636286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE