General
- Target 2026-05-06_4336599b1e1da40bef3e59cd7c1d2cd8_cobalt-strike_elex_hijackloader_icedid_swisyn_vidar
- Size 780KB
- Sample260506-tl6bmses2v
- SHA256 8e3b673a7d7e7812c53343a124e5f50c7786059a4b3e6675441ecba038c763f7
- MD5 4336599b1e1da40bef3e59cd7c1d2cd8
- SHA1 a703a2b7a7c9418a7d3fd0b9ab7c548469558377
- SHA512 d5052e89d1305f5d06b869ae26f32d50185e90c9fc9266d04dfde69a3e7c316917055c0c7c72193348ed38e84ae785d905a59353f7001540556cb0416868893d
- SSDEEP 12288:PFUNDaa7qTUFuly20mB3EOIZ79QzM6flIHHFcJr2:PFOaEqaIyulnqQo6flIHHQr2
- TLSH T1AD05A443E48758A9CC080EB165EAC63765201DFA0FAB0DDB5F885BA026731693FD5ECD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-06_4336599b1e1da40bef3e59cd7c1d2cd8_cobalt-strike_elex_hijackloader_icedid_swisyn_vidar.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_4336599b1e1da40bef3e59cd7c1d2cd8_cobalt-strike_elex_hijackloader_icedid_swisyn_vidar.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_4336599b1e1da40bef3e59cd7c1d2cd8_cobalt-strike_elex_hijackloader_icedid_swisyn_vidar
- Size 780KB
- SHA256 8e3b673a7d7e7812c53343a124e5f50c7786059a4b3e6675441ecba038c763f7
- MD5 4336599b1e1da40bef3e59cd7c1d2cd8
- SHA1 a703a2b7a7c9418a7d3fd0b9ab7c548469558377
- SHA512 d5052e89d1305f5d06b869ae26f32d50185e90c9fc9266d04dfde69a3e7c316917055c0c7c72193348ed38e84ae785d905a59353f7001540556cb0416868893d
- SSDEEP 12288:PFUNDaa7qTUFuly20mB3EOIZ79QzM6flIHHFcJr2:PFOaEqaIyulnqQo6flIHHQr2
- TLSH T1AD05A443E48758A9CC080EB165EAC63765201DFA0FAB0DDB5F885BA026731693FD5ECD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies visibility of hidden/system files in Explorer
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory