General
- Target 2026-10-22_1fffed70421c1a6c20dbcab301e4a702_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 2.4MB
- Sample261024-yahtesdx4k
- SHA256 8f12563d53db00ca819dc05173b70c071c11a971c997645a8dabb5c783de2f2c
- MD5 1fffed70421c1a6c20dbcab301e4a702
- SHA1 c47f31e1f6b39e192e531c29034a43adaf0558e5
- SHA512 be6a8edd400e65dea2ed59dd65342fdd648c2d2395a73b8a79debbf468ec07c1d5c6f072cf753b7790f9ea7fd37381d731ba380735f358e512c69f98e26b3acb
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatgluCC5/Y5fqatglZVtDtL:TID41vd5g5r+V
- TLSH T172B56B49B7D555A2E5634231886782A26F727C201F2193DF2390B23D5F337D0FA3AB66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_1fffed70421c1a6c20dbcab301e4a702_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_1fffed70421c1a6c20dbcab301e4a702_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_1fffed70421c1a6c20dbcab301e4a702_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 2.4MB
- SHA256 8f12563d53db00ca819dc05173b70c071c11a971c997645a8dabb5c783de2f2c
- MD5 1fffed70421c1a6c20dbcab301e4a702
- SHA1 c47f31e1f6b39e192e531c29034a43adaf0558e5
- SHA512 be6a8edd400e65dea2ed59dd65342fdd648c2d2395a73b8a79debbf468ec07c1d5c6f072cf753b7790f9ea7fd37381d731ba380735f358e512c69f98e26b3acb
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatgluCC5/Y5fqatglZVtDtL:TID41vd5g5r+V
- TLSH T172B56B49B7D555A2E5634231886782A26F727C201F2193DF2390B23D5F337D0FA3AB66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory