General
- Target 2026-04-15_3188a4f56752e93b70a74d9d36a4346a_cobalt-strike_elex_hijackloader_icedid_njrat_shodi_vidar_wannacry
- Size 3.2MB
- Sample260415-err9msev3m
- SHA256 e956a7e9e418109ee116c5941212d82b3f8f96e001333b3a51b0cfba8fe794cf
- MD5 3188a4f56752e93b70a74d9d36a4346a
- SHA1 9951f9694db9339d94063031dfa26b660d4c258d
- SHA512 721032820f7fdff9a71f060de67afc3f8cf72bc527202b69a97e8c1dbe803682e7f020e2171bfbd47e32272257a81ddd66beb826add1149695881c56482f83a6
- SSDEEP 49152:W+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyZKCUEzDGcpeapel0:X0oAaldmdmnpZjzEvl0
- TLSH T15BF54903A29548E9D14AD074CE46C232E7627C4D4BF265EF36907ADA3E77AD03B3A714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_3188a4f56752e93b70a74d9d36a4346a_cobalt-strike_elex_hijackloader_icedid_njrat_shodi_vidar_wannacry.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_3188a4f56752e93b70a74d9d36a4346a_cobalt-strike_elex_hijackloader_icedid_njrat_shodi_vidar_wannacry.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_3188a4f56752e93b70a74d9d36a4346a_cobalt-strike_elex_hijackloader_icedid_njrat_shodi_vidar_wannacry
- Size 3.2MB
- SHA256 e956a7e9e418109ee116c5941212d82b3f8f96e001333b3a51b0cfba8fe794cf
- MD5 3188a4f56752e93b70a74d9d36a4346a
- SHA1 9951f9694db9339d94063031dfa26b660d4c258d
- SHA512 721032820f7fdff9a71f060de67afc3f8cf72bc527202b69a97e8c1dbe803682e7f020e2171bfbd47e32272257a81ddd66beb826add1149695881c56482f83a6
- SSDEEP 49152:W+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyZKCUEzDGcpeapel0:X0oAaldmdmnpZjzEvl0
- TLSH T15BF54903A29548E9D14AD074CE46C232E7627C4D4BF265EF36907ADA3E77AD03B3A714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory