General
- Target 2026-04-26_82eb625893e335cb4cb018a710098fdc_cloudeye_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 6.8MB
- Sample260426-e5jvesfw9l
- SHA256 22b6fd83a58a11c5781cf91520190ab5e89eb10b722d35aeecf5f2422c439a00
- MD5 82eb625893e335cb4cb018a710098fdc
- SHA1 03b54308d68ae96e5b5ee8a674f4cc3b49ac2a17
- SHA512 bf919d017181f817c1e021256b3257fc6fc9b305c4a2c99c07885cbe016bf03c85a8bfe9252f036694c5554fe79313c317bdd1cdc273b905f3b72986367dada9
- SSDEEP 49152:wabH/mabH/IjYabH/habH/Ij2+R+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzL:2z2+s0oAaldmdmnpJ6dK2880MLapI9
- TLSH T124667C13B291449AD149C030EF66C231A7A17C6D4BF1D6FB7284B7D92E72AD13B3970A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-26_82eb625893e335cb4cb018a710098fdc_cloudeye_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260130-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-26_82eb625893e335cb4cb018a710098fdc_cloudeye_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11-20260130-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-26_82eb625893e335cb4cb018a710098fdc_cloudeye_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 6.8MB
- SHA256 22b6fd83a58a11c5781cf91520190ab5e89eb10b722d35aeecf5f2422c439a00
- MD5 82eb625893e335cb4cb018a710098fdc
- SHA1 03b54308d68ae96e5b5ee8a674f4cc3b49ac2a17
- SHA512 bf919d017181f817c1e021256b3257fc6fc9b305c4a2c99c07885cbe016bf03c85a8bfe9252f036694c5554fe79313c317bdd1cdc273b905f3b72986367dada9
- SSDEEP 49152:wabH/mabH/IjYabH/habH/Ij2+R+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzL:2z2+s0oAaldmdmnpJ6dK2880MLapI9
- TLSH T124667C13B291449AD149C030EF66C231A7A17C6D4BF1D6FB7284B7D92E72AD13B3970A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1