General
- Target 2026-09-29_eb7cfaff0e775877f74a28e1e9c91c93_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar
- Size 5.3MB
- Sample260930-stk51ayapf
- SHA256 58d05c6b4855c7b65f0af936c0518dfa614a3184dd30549edd86ced0b8a61c97
- MD5 eb7cfaff0e775877f74a28e1e9c91c93
- SHA1 c044846e8e8ab7aa75a33901f12e60c33d962e55
- SHA512 08cb1d6c42f31f5cd2f2e23f1f2c50c95a975d8beaffa5161ea035969da53222a9629f50a2f5429000f9481a1a20d43c478687a91ee23cb5b272406b506745b0
- SSDEEP 98304:FiIs3elszb71QGQCPDbZfHayCb7BJ5mjwNwwMeZYobSr+PAY+eamE:IIs5dQmRfaycBIGpEoDD+2E
- TLSH T102463365AB9808F9F8B7C17D0C62815DFA727C1603B5E94713A187862EB72A23CF5317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_eb7cfaff0e775877f74a28e1e9c91c93_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_eb7cfaff0e775877f74a28e1e9c91c93_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_eb7cfaff0e775877f74a28e1e9c91c93_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_swisyn_vidar
- Size 5.3MB
- SHA256 58d05c6b4855c7b65f0af936c0518dfa614a3184dd30549edd86ced0b8a61c97
- MD5 eb7cfaff0e775877f74a28e1e9c91c93
- SHA1 c044846e8e8ab7aa75a33901f12e60c33d962e55
- SHA512 08cb1d6c42f31f5cd2f2e23f1f2c50c95a975d8beaffa5161ea035969da53222a9629f50a2f5429000f9481a1a20d43c478687a91ee23cb5b272406b506745b0
- SSDEEP 98304:FiIs3elszb71QGQCPDbZfHayCb7BJ5mjwNwwMeZYobSr+PAY+eamE:IIs5dQmRfaycBIGpEoDD+2E
- TLSH T102463365AB9808F9F8B7C17D0C62815DFA727C1603B5E94713A187862EB72A23CF5317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory