General
- Target 2026-05-02_6c69d98f8bba875f688152fd7d16b80b_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 975KB
- Sample260502-yaz3psew91
- SHA256 2659009bbdff7e63bb93e28a200da60976cbf050d057cff4c2179368b91b3ecf
- MD5 6c69d98f8bba875f688152fd7d16b80b
- SHA1 71732a873a76a68d8dc5d2ea7db926e8c03ba783
- SHA512 16b3014fea12c5282e154eaf7ea1b9771d0092f16a1a81451431de87904f502d7f2a7d1bc6fb1c0ba1620754530bbea585cfce36cc7b1c0f7206ba2071ef3786
- SSDEEP 24576:w4R5CIH/7zzzd5b20GU20Gom3NCdBTNsk:wabH//zhBNw3NCLT7
- TLSH T183256C52B39408E9E873C53999618516EA727C650B60DECF6380770A1F337E2AE38F57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-02_6c69d98f8bba875f688152fd7d16b80b_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260130-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-02_6c69d98f8bba875f688152fd7d16b80b_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11-20260130-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-02_6c69d98f8bba875f688152fd7d16b80b_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 975KB
- SHA256 2659009bbdff7e63bb93e28a200da60976cbf050d057cff4c2179368b91b3ecf
- MD5 6c69d98f8bba875f688152fd7d16b80b
- SHA1 71732a873a76a68d8dc5d2ea7db926e8c03ba783
- SHA512 16b3014fea12c5282e154eaf7ea1b9771d0092f16a1a81451431de87904f502d7f2a7d1bc6fb1c0ba1620754530bbea585cfce36cc7b1c0f7206ba2071ef3786
- SSDEEP 24576:w4R5CIH/7zzzd5b20GU20Gom3NCdBTNsk:wabH//zhBNw3NCLT7
- TLSH T183256C52B39408E9E873C53999618516EA727C650B60DECF6380770A1F337E2AE38F57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1