Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/05/2026, 22:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-03_bdc700c3fa330be641f8ce0698f764e5_amadey_cobalt-strike_elex_icedid_njrat.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
General
- Target 2026-05-03_bdc700c3fa330be641f8ce0698f764e5_amadey_cobalt-strike_elex_icedid_njrat.exe
- Size 528KB
- Sample260503-2d281sc15j
- SHA256 19f4428e856ecf4ef55ae3a8a9291adfd9583a75364d087fe58bbb17fed3d658
- MD5 bdc700c3fa330be641f8ce0698f764e5
- SHA1 578496bde058977a2772e56f6e24424fba0e15af
- SHA512 1e463d02f311995f907285b6523b4fef02e94284b9ba63623aaf0628777d4438a9e6ccc3916e8f5d461d8e87444d532c6be8704223ca325725f379bb866399fc
- SSDEEP 12288:cugJLoQUmeWHMhWwf1cSj2s4pUsB8EOlh6Her5+nZo:cu1QUmeWHIrGts4ihl4
- TLSH T1B2B4BE18F4A4D8C1C875CF759C7CD2A9E316B48AB6F3856A66D8231C3D45EF84F0A92C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1088 4700 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-03_bdc700c3fa330be641f8ce0698f764e5_amadey_cobalt-strike_elex_icedid_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-03_bdc700c3fa330be641f8ce0698f764e5_amadey_cobalt-strike_elex_icedid_njrat.exe"1⤵PID:4700
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4700 -s 2162⤵
- Program crash
PID:1088
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4700 -ip 47001⤵PID:4624