General
- Target 2026-05-11_20d4ae46d6b9fc4f675a796d10e984a0_cloudeye_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 2.0MB
- Sample260511-ba58dsct2j
- SHA256 b6906d68b595790ff42f45183380cb1644613d9aaad2c5bdc41c757dfc16e53d
- MD5 20d4ae46d6b9fc4f675a796d10e984a0
- SHA1 995ce990e9db4ae6a4c5e9345c79c2b0cd27c923
- SHA512 5b53db0ebbd9f8bf8274da2330761645d6f7a08215d7859c17f11e164843f5088fb79d1654a6d4110e52334cb3af7dddcd423c145949ab59ddf76d0830bda26d
- SSDEEP 49152:wabH/habH/g69dsTh7IwVT28foh0Y1oQTM3NCLT7:R7Iw12880rCz
- TLSH T194A57C11B7809862D86A893078B5C71B6B35BDA12B50C6FB7396B34C1E337D2A97431F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_20d4ae46d6b9fc4f675a796d10e984a0_cloudeye_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20250619-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_20d4ae46d6b9fc4f675a796d10e984a0_cloudeye_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11-20260130-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_20d4ae46d6b9fc4f675a796d10e984a0_cloudeye_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 2.0MB
- SHA256 b6906d68b595790ff42f45183380cb1644613d9aaad2c5bdc41c757dfc16e53d
- MD5 20d4ae46d6b9fc4f675a796d10e984a0
- SHA1 995ce990e9db4ae6a4c5e9345c79c2b0cd27c923
- SHA512 5b53db0ebbd9f8bf8274da2330761645d6f7a08215d7859c17f11e164843f5088fb79d1654a6d4110e52334cb3af7dddcd423c145949ab59ddf76d0830bda26d
- SSDEEP 49152:wabH/habH/g69dsTh7IwVT28foh0Y1oQTM3NCLT7:R7Iw12880rCz
- TLSH T194A57C11B7809862D86A893078B5C71B6B35BDA12B50C6FB7396B34C1E337D2A97431F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1