General
- Target 2026-10-22_9e22c97ae3200fe379f983deae7b4cd8_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 5.6MB
- Sample261024-ddv8psht5p
- SHA256 2afee3bbc8193a96382a5831792403cc4465ee921fe9ed60fe2349bfac19249e
- MD5 9e22c97ae3200fe379f983deae7b4cd8
- SHA1 895fbfc4d318c37dc40a6111783eabdd4431ab19
- SHA512 af0d6cc5179c719a598bdb391af57db3a1ae522468c5e51fdc8b34f9e2dc0a2bdc4189279012e2ce5e0aa102b62c47f31156a98365d701c92855092f7f2f7ef4
- SSDEEP 98304:njBxcO4EYljBxcO4UW1Psz8WQtZ/K0tGOFWVRuLftCTeI1W:njBxcO4VjBxcO4txsgWyZ/K0ttYVAATE
- TLSH T1C8466C03F2D540A9E1AAE174CE3696329B327C194BF1A5DF2244B6D51F73AD07B38722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_9e22c97ae3200fe379f983deae7b4cd8_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_r.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_9e22c97ae3200fe379f983deae7b4cd8_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_r.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_9e22c97ae3200fe379f983deae7b4cd8_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 5.6MB
- SHA256 2afee3bbc8193a96382a5831792403cc4465ee921fe9ed60fe2349bfac19249e
- MD5 9e22c97ae3200fe379f983deae7b4cd8
- SHA1 895fbfc4d318c37dc40a6111783eabdd4431ab19
- SHA512 af0d6cc5179c719a598bdb391af57db3a1ae522468c5e51fdc8b34f9e2dc0a2bdc4189279012e2ce5e0aa102b62c47f31156a98365d701c92855092f7f2f7ef4
- SSDEEP 98304:njBxcO4EYljBxcO4UW1Psz8WQtZ/K0tGOFWVRuLftCTeI1W:njBxcO4VjBxcO4txsgWyZ/K0ttYVAATE
- TLSH T1C8466C03F2D540A9E1AAE174CE3696329B327C194BF1A5DF2244B6D51F73AD07B38722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory