General
- Target 2026-11-09_9068bfa80634889e08a316839d49b630_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_stealc
- Size 355KB
- Sample261110-pzecvsfd88
- SHA256 a8d3be7edc336f4f3bf414a781a61847a8189de0ba8ee6852b90055973f25bc7
- MD5 9068bfa80634889e08a316839d49b630
- SHA1 9560b17fbbb1cb0d090536c1f830b2248cf5b05c
- SHA512 1f1748cc114f1f9747d06c1216d424ca5cdffe475e882ce56c615b433e5862b42351a09efbcefa74510bbcda1493e996fddacc8819acef87d7080a46f186cd6b
- SSDEEP 6144:KpM386Aj/v0K5P10+87fpjA4db+JxkB1b:KpU86Az0K5Qh9Ik
- TLSH T157749D17B3A511FBE2778638C9530A02EB72B85247609BDF07A446B55F237D09E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-09_9068bfa80634889e08a316839d49b630_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_9068bfa80634889e08a316839d49b630_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_9068bfa80634889e08a316839d49b630_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_stealc
- Size 355KB
- SHA256 a8d3be7edc336f4f3bf414a781a61847a8189de0ba8ee6852b90055973f25bc7
- MD5 9068bfa80634889e08a316839d49b630
- SHA1 9560b17fbbb1cb0d090536c1f830b2248cf5b05c
- SHA512 1f1748cc114f1f9747d06c1216d424ca5cdffe475e882ce56c615b433e5862b42351a09efbcefa74510bbcda1493e996fddacc8819acef87d7080a46f186cd6b
- SSDEEP 6144:KpM386Aj/v0K5P10+87fpjA4db+JxkB1b:KpU86Az0K5Qh9Ik
- TLSH T157749D17B3A511FBE2778638C9530A02EB72B85247609BDF07A446B55F237D09E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.