General
- Target 2026-10-22_b73a87465ab8dd13fc832449729bfcb8_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- Sample261023-3ecv7a1vex
- SHA256 45dd2bf8cc9aafd535e6501c8bf983dce48b9914f73c0d5a9433493883509934
- MD5 b73a87465ab8dd13fc832449729bfcb8
- SHA1 5d2ea3d448884ffc36d2a4b82ce127601fa8ce28
- SHA512 fc3d8dc9f4d31b05c5a10c70d64d97584047efccfc020086e320b5bb2446ea5b42f92d90a8a0fc85eb67056c95aafcf6e43a96bd51582c747994c506a598298f
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFoug:0NA1Yakeer5+nso1
- TLSH T18505A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_b73a87465ab8dd13fc832449729bfcb8_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_b73a87465ab8dd13fc832449729bfcb8_cobalt-strike_elex_glassworm_gobot_icedid_njrat.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_b73a87465ab8dd13fc832449729bfcb8_cobalt-strike_elex_glassworm_gobot_icedid_njrat
- Size 804KB
- SHA256 45dd2bf8cc9aafd535e6501c8bf983dce48b9914f73c0d5a9433493883509934
- MD5 b73a87465ab8dd13fc832449729bfcb8
- SHA1 5d2ea3d448884ffc36d2a4b82ce127601fa8ce28
- SHA512 fc3d8dc9f4d31b05c5a10c70d64d97584047efccfc020086e320b5bb2446ea5b42f92d90a8a0fc85eb67056c95aafcf6e43a96bd51582c747994c506a598298f
- SSDEEP 6144:QGKnJ7yE189/drLHgDe7eVvaDtZV7+TL7nqer5+nWFoug:0NA1Yakeer5+nso1
- TLSH T18505A3A7E7929AE8E65D44766F184140D72EF221AB0F6320786C120DCF5778B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Contacts a large (2859) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Adds Run key to start application
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.