General
- Target 2026-06-03_757c806eceb93af1c6e1254a8861b809_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 5.1MB
- Sample260603-tsb2dabw7v
- SHA256 9496b753f4904fa17fe2017f9dee0020281c33fd438a0d5efcdc91551b4d1356
- MD5 757c806eceb93af1c6e1254a8861b809
- SHA1 5c4799bacf4560cd5c51c6df7fc73febc30bd14e
- SHA512 8d9aa58e8e2a31482c6b3bed7ca6d77162ab8b2a1c9123870f3fa95a27069f445cecbb45137f96b6c12784757115118a37eb09c28a33524f674f7913bb2edbf0
- SSDEEP 49152:PabH/tutRJiabH/LutRJNQUtTToonbXaIHy5B+Cq99LyHHI+t6O8N+ailEy6dmpD:2uRduRYU/nbXaP80oAaldmdmnpcF
- TLSH T1F4465A13B25145A9F019DD36CE0AB321EB217C990BF196EFA68476D92E366F03F39704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-03_757c806eceb93af1c6e1254a8861b809_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-03_757c806eceb93af1c6e1254a8861b809_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-03_757c806eceb93af1c6e1254a8861b809_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 5.1MB
- SHA256 9496b753f4904fa17fe2017f9dee0020281c33fd438a0d5efcdc91551b4d1356
- MD5 757c806eceb93af1c6e1254a8861b809
- SHA1 5c4799bacf4560cd5c51c6df7fc73febc30bd14e
- SHA512 8d9aa58e8e2a31482c6b3bed7ca6d77162ab8b2a1c9123870f3fa95a27069f445cecbb45137f96b6c12784757115118a37eb09c28a33524f674f7913bb2edbf0
- SSDEEP 49152:PabH/tutRJiabH/LutRJNQUtTToonbXaIHy5B+Cq99LyHHI+t6O8N+ailEy6dmpD:2uRduRYU/nbXaP80oAaldmdmnpcF
- TLSH T1F4465A13B25145A9F019DD36CE0AB321EB217C990BF196EFA68476D92E366F03F39704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1