General
- Target 2026-09-30_f9e92e8ff68f7b16e2f3d601a5c3a1d8_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- Sample260930-has2dsvdrb
- SHA256 f535375922f854bd3049f4e5d4f6f95f1607e5a7f3d98484aa1994a85b177dc4
- MD5 f9e92e8ff68f7b16e2f3d601a5c3a1d8
- SHA1 85b3936d8432e19ef3c8f7bc8758100ac4338eeb
- SHA512 0c25c2759973c52d682a001e0b7321cf13cb0e5cf738c17c42b20a3fd72e003e0f5a65be05ab1983bf6d43ccb7b1625cbffb2dfe73f77f6fcfdfa01f147a1462
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFous:0NA1Yakeer5+nsoX
- TLSH T14E05A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_f9e92e8ff68f7b16e2f3d601a5c3a1d8_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_f9e92e8ff68f7b16e2f3d601a5c3a1d8_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_f9e92e8ff68f7b16e2f3d601a5c3a1d8_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- SHA256 f535375922f854bd3049f4e5d4f6f95f1607e5a7f3d98484aa1994a85b177dc4
- MD5 f9e92e8ff68f7b16e2f3d601a5c3a1d8
- SHA1 85b3936d8432e19ef3c8f7bc8758100ac4338eeb
- SHA512 0c25c2759973c52d682a001e0b7321cf13cb0e5cf738c17c42b20a3fd72e003e0f5a65be05ab1983bf6d43ccb7b1625cbffb2dfe73f77f6fcfdfa01f147a1462
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFous:0NA1Yakeer5+nsoX
- TLSH T14E05A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Contacts a large (790) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Adds Run key to start application