General
- Target 2026-10-08_062f941a824d4407e25c22458e5798c6_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.7MB
- Sample261009-1tpgesfs2w
- SHA256 40293b4a814d0fa871a957fca55092af30a02dab8ed51e39d38da9f34ed9ecf3
- MD5 062f941a824d4407e25c22458e5798c6
- SHA1 c1b391d70d9de1ebffdc2aa2b4a90f8e25a1df95
- SHA512 a706b688fc5884fa6d090dda14b9caf8d05cf1bbae3baa553902978db586d489e6fb267b34ea0157be097d4331c735f1059e35f2bb81a67c5736e8b4c0f12446
- SSDEEP 98304:g0nAAYEpxnj+hkQA91pH2WpjHrgBFFu416AWv3:dNznjRQmHpn6F44IAWv3
- TLSH T194865BA166A7A0FCE46ED075DB2A8775E6723C274071830B12BDFA163F736142D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-08_062f941a824d4407e25c22458e5798c6_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_062f941a824d4407e25c22458e5798c6_cobalt-strike_elex_glassworm_icedid_njrat_vidar
- Size 7.7MB
- SHA256 40293b4a814d0fa871a957fca55092af30a02dab8ed51e39d38da9f34ed9ecf3
- MD5 062f941a824d4407e25c22458e5798c6
- SHA1 c1b391d70d9de1ebffdc2aa2b4a90f8e25a1df95
- SHA512 a706b688fc5884fa6d090dda14b9caf8d05cf1bbae3baa553902978db586d489e6fb267b34ea0157be097d4331c735f1059e35f2bb81a67c5736e8b4c0f12446
- SSDEEP 98304:g0nAAYEpxnj+hkQA91pH2WpjHrgBFFu416AWv3:dNznjRQmHpn6F44IAWv3
- TLSH T194865BA166A7A0FCE46ED075DB2A8775E6723C274071830B12BDFA163F736142D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1