General
- Target 2026-10-16_97a883fd0ae5337d9431f81c94c41f2e_cobalt-strike_elex_glassworm_icedid_njrat_swisyn
- Size 5.3MB
- Sample261017-nh2ldsys9l
- SHA256 9f3c84cc1afa429bc1962d545468d2e33ab885761215dd0b0bad064056ac0780
- MD5 97a883fd0ae5337d9431f81c94c41f2e
- SHA1 e8931d03d5f1ededc607f5d12dfbed8431d61be2
- SHA512 8a94acf4c16a2038a6be90bc2bfcb3f6d3e97bbf7b7eaf5e9dc7e8e19e7a8381d8bc9d723d470901848b62b27b70231892b595f5e9ce951516f62eab5610dd75
- SSDEEP 49152:tZydcUxh2siKpwxSUsYwto8PTGP7815pMrNoy8V7Jnh2/GqAU51kYjrFsupMkND7:wfwxssAJV9hwhz/UlU+921bzQy
- TLSH T12B467D03F29911D8C01ED1BA8B5A9222FAA1BC450B31B6DF0B6477151F76EE4AF3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-16_97a883fd0ae5337d9431f81c94c41f2e_cobalt-strike_elex_glassworm_icedid_njrat_swisyn.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_97a883fd0ae5337d9431f81c94c41f2e_cobalt-strike_elex_glassworm_icedid_njrat_swisyn.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_97a883fd0ae5337d9431f81c94c41f2e_cobalt-strike_elex_glassworm_icedid_njrat_swisyn
- Size 5.3MB
- SHA256 9f3c84cc1afa429bc1962d545468d2e33ab885761215dd0b0bad064056ac0780
- MD5 97a883fd0ae5337d9431f81c94c41f2e
- SHA1 e8931d03d5f1ededc607f5d12dfbed8431d61be2
- SHA512 8a94acf4c16a2038a6be90bc2bfcb3f6d3e97bbf7b7eaf5e9dc7e8e19e7a8381d8bc9d723d470901848b62b27b70231892b595f5e9ce951516f62eab5610dd75
- SSDEEP 49152:tZydcUxh2siKpwxSUsYwto8PTGP7815pMrNoy8V7Jnh2/GqAU51kYjrFsupMkND7:wfwxssAJV9hwhz/UlU+921bzQy
- TLSH T12B467D03F29911D8C01ED1BA8B5A9222FAA1BC450B31B6DF0B6477151F76EE4AF3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory