General
- Target 2026-04-15_9fc60453ab876098b0b4c133d30b11a0_cobalt-strike_elex_icedid_njrat_vidar
- Size 761KB
- Sample260415-2c73waa19q
- SHA256 476edae18c5a118d226dfe85cb30a09f76a47e605fa655940559d08fc3e14c7c
- MD5 9fc60453ab876098b0b4c133d30b11a0
- SHA1 f27f78aad2051d5c71dc8509cbd9145d26fb6c78
- SHA512 4934e6cc1088949cb6f1dd09f5e5c17b4b9233b3a5e855a470021a299ed556a311c0eb783174d9f841f96847ae3f351b555b1c1696ad5c15e4ffc1a80fd6606c
- SSDEEP 12288:w4Ryed8I7r/7mWGObdaFjdsTcFyn/7Iw9DXXAm3ggRUeMz9TNXvkk:w4R5CIH/7zGObda9dsTcQ7IwZgm3NCd1
- TLSH T1CCF49C22B79004B9D866C179A9558617EA713C710360DACFA3C43B163F336E27A7879F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_9fc60453ab876098b0b4c133d30b11a0_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260130-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_9fc60453ab876098b0b4c133d30b11a0_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win11-20260130-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_9fc60453ab876098b0b4c133d30b11a0_cobalt-strike_elex_icedid_njrat_vidar
- Size 761KB
- SHA256 476edae18c5a118d226dfe85cb30a09f76a47e605fa655940559d08fc3e14c7c
- MD5 9fc60453ab876098b0b4c133d30b11a0
- SHA1 f27f78aad2051d5c71dc8509cbd9145d26fb6c78
- SHA512 4934e6cc1088949cb6f1dd09f5e5c17b4b9233b3a5e855a470021a299ed556a311c0eb783174d9f841f96847ae3f351b555b1c1696ad5c15e4ffc1a80fd6606c
- SSDEEP 12288:w4Ryed8I7r/7mWGObdaFjdsTcFyn/7Iw9DXXAm3ggRUeMz9TNXvkk:w4R5CIH/7zGObda9dsTcQ7IwZgm3NCd1
- TLSH T1CCF49C22B79004B9D866C179A9558617EA713C710360DACFA3C43B163F336E27A7879F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Grants admin privileges
Uses net.exe to modify the user's privileges.
Disables service(s)
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1