General
- Target 2026-05-23_830dd39e91abba86a4c4096b6a8ef0ad_cobalt-strike_elex_icedid_njrat_vidar
- Size 933KB
- Sample260523-ek6tfscv8j
- SHA256 1e15b9a305c573592424438b7a86b6623abffd5a0f6a9ed85011c17390b89920
- MD5 830dd39e91abba86a4c4096b6a8ef0ad
- SHA1 77f7c98452534a1a2a142ffb2e4471cf3f48f663
- SHA512 6eb91250656f8d154f665e1381113062b76dd616496dc92f043771041b865b74403c433c4aaaa27dbe9baff7cdccbadb382b7699f86b5c375a220850fd8601d1
- SSDEEP 24576:w4R5CIH/7mc4R5CIH/7020GNcydWXkcDPjHg9PnNUcQU:wabH/CcabH/YoYXxPjH+PIU
- TLSH T128153951B7D400A9F073CA75A8758506EA367D750B60DE8F6380760E1E32AE3AD78F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-23_830dd39e91abba86a4c4096b6a8ef0ad_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_830dd39e91abba86a4c4096b6a8ef0ad_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win11-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-23_830dd39e91abba86a4c4096b6a8ef0ad_cobalt-strike_elex_icedid_njrat_vidar
- Size 933KB
- SHA256 1e15b9a305c573592424438b7a86b6623abffd5a0f6a9ed85011c17390b89920
- MD5 830dd39e91abba86a4c4096b6a8ef0ad
- SHA1 77f7c98452534a1a2a142ffb2e4471cf3f48f663
- SHA512 6eb91250656f8d154f665e1381113062b76dd616496dc92f043771041b865b74403c433c4aaaa27dbe9baff7cdccbadb382b7699f86b5c375a220850fd8601d1
- SSDEEP 24576:w4R5CIH/7mc4R5CIH/7020GNcydWXkcDPjHg9PnNUcQU:wabH/CcabH/YoYXxPjH+PIU
- TLSH T128153951B7D400A9F073CA75A8758506EA367D750B60DE8F6380760E1E32AE3AD78F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1