General
- Target 2026-04-21_828adf88ac62ba7e9111442ac0286abe_coinminer_elex_icedid_njrat_xloader
- Size 1.1MB
- Sample260421-ed1nvsbs91
- SHA256 3dd19448c609628dad3c04efa2d6267ba544177695f919ba4b85e1b800f52539
- MD5 828adf88ac62ba7e9111442ac0286abe
- SHA1 6761eb3c81f51a71bd6ca47c7332bc665072cd2c
- SHA512 cbb7cd48af8894495e6dfb3751ea2aa1d0ba654cf9f84df6048e0c8fde9856b25b6a0f2065233f58d4f52b1a1b06d67190316f566fc0aa2a043cfe58c779c49c
- SSDEEP 12288:z6Wq4aaE6KwyF5L0Y2D1PqLb6Wq44er5+nZoybaE6KwyF5L0Y2D1PqLx6Wq4aaEp:ZthEVaPqLBt0KEVaPqLHthEVaPqLTth5
- TLSH T19D35029E77A9E8D3DC744E31EC62428142B078A36F619B7B60D4520F5CBF1749E26F28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-21_828adf88ac62ba7e9111442ac0286abe_coinminer_elex_icedid_njrat_xloader.exe
Resource
win10v2004-20260130-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-21_828adf88ac62ba7e9111442ac0286abe_coinminer_elex_icedid_njrat_xloader.exe
Resource
win11-20260130-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-21_828adf88ac62ba7e9111442ac0286abe_coinminer_elex_icedid_njrat_xloader
- Size 1.1MB
- SHA256 3dd19448c609628dad3c04efa2d6267ba544177695f919ba4b85e1b800f52539
- MD5 828adf88ac62ba7e9111442ac0286abe
- SHA1 6761eb3c81f51a71bd6ca47c7332bc665072cd2c
- SHA512 cbb7cd48af8894495e6dfb3751ea2aa1d0ba654cf9f84df6048e0c8fde9856b25b6a0f2065233f58d4f52b1a1b06d67190316f566fc0aa2a043cfe58c779c49c
- SSDEEP 12288:z6Wq4aaE6KwyF5L0Y2D1PqLb6Wq44er5+nZoybaE6KwyF5L0Y2D1PqLx6Wq4aaEp:ZthEVaPqLBt0KEVaPqLHthEVaPqLTth5
- TLSH T19D35029E77A9E8D3DC744E31EC62428142B078A36F619B7B60D4520F5CBF1749E26F28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.