General
- Target 2026-05-30_640e5ea6e7ec72d699a1c92d493b4d71_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 8.6MB
- Sample260530-dxt5rafw6p
- SHA256 e3fb12a2886148703b82078805a79c29e21cec596ab429dfaebd9118f3771564
- MD5 640e5ea6e7ec72d699a1c92d493b4d71
- SHA1 3bbdc044b2f7579f7e0aab1aab6aae846f893437
- SHA512 e9ed98aa6ef5d49d397177f21266c189434da46bae39936873e9f42a29c41ff3914d85633d1dad09bead5d145ba3f3da4eefd97c2a9f6a7f832bec391c241b5e
- SSDEEP 98304:56dO6dNWQtZ/K0tGOFWVRuLftCTR0oAaldmdmnpW:eWyZ/K0ttYVAATmKmd0M
- TLSH T10D966B03F6A501E9E05AD174DE328232AB727C594BF1A5EF329076E52E72AD03F38751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-30_640e5ea6e7ec72d699a1c92d493b4d71_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-30_640e5ea6e7ec72d699a1c92d493b4d71_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-30_640e5ea6e7ec72d699a1c92d493b4d71_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 8.6MB
- SHA256 e3fb12a2886148703b82078805a79c29e21cec596ab429dfaebd9118f3771564
- MD5 640e5ea6e7ec72d699a1c92d493b4d71
- SHA1 3bbdc044b2f7579f7e0aab1aab6aae846f893437
- SHA512 e9ed98aa6ef5d49d397177f21266c189434da46bae39936873e9f42a29c41ff3914d85633d1dad09bead5d145ba3f3da4eefd97c2a9f6a7f832bec391c241b5e
- SSDEEP 98304:56dO6dNWQtZ/K0tGOFWVRuLftCTR0oAaldmdmnpW:eWyZ/K0ttYVAATmKmd0M
- TLSH T10D966B03F6A501E9E05AD174DE328232AB727C594BF1A5EF329076E52E72AD03F38751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory