General
- Target 2026-04-17_65ac1cb8898577a213d174b181bfb978_cobalt-strike_elex_icedid_njrat_vobfus
- Size 352KB
- Sample260417-d4zc2set5p
- SHA256 995f94ec32c590d30ec8b26ed7eedc3a9409186304e17f88983e83ca1aef7f2e
- MD5 65ac1cb8898577a213d174b181bfb978
- SHA1 16ffb5f20930bdc7768caeaea230809f250bef12
- SHA512 9220ad4bed13dbef50dd347d037a0abfe87d943dac38418a620cb01d7cf56b212c11d3388986cb3dd9414e8352437962440ce3b1ab6568f2db3eeda08d2ce54a
- SSDEEP 6144:Oaq/uuIcNmLX8dhaRbeo9lXwHFBSvOJFISYTkSqer5+nDFoy5s:OzGuXS8XaRbeoD3vOJFIcer5+nZoyG
- TLSH T13B7419097750F8FBC924CFF0682947915224A8B73A81AD17E5C0170A6DFB9EADF11B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_65ac1cb8898577a213d174b181bfb978_cobalt-strike_elex_icedid_njrat_vobfus.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_65ac1cb8898577a213d174b181bfb978_cobalt-strike_elex_icedid_njrat_vobfus.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_65ac1cb8898577a213d174b181bfb978_cobalt-strike_elex_icedid_njrat_vobfus
- Size 352KB
- SHA256 995f94ec32c590d30ec8b26ed7eedc3a9409186304e17f88983e83ca1aef7f2e
- MD5 65ac1cb8898577a213d174b181bfb978
- SHA1 16ffb5f20930bdc7768caeaea230809f250bef12
- SHA512 9220ad4bed13dbef50dd347d037a0abfe87d943dac38418a620cb01d7cf56b212c11d3388986cb3dd9414e8352437962440ce3b1ab6568f2db3eeda08d2ce54a
- SSDEEP 6144:Oaq/uuIcNmLX8dhaRbeo9lXwHFBSvOJFISYTkSqer5+nDFoy5s:OzGuXS8XaRbeoD3vOJFIcer5+nZoyG
- TLSH T13B7419097750F8FBC924CFF0682947915224A8B73A81AD17E5C0170A6DFB9EADF11B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2