General
- Target 2026-06-04_9a0aca90a4ae3d5460182ec060fe3a5c_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 6.7MB
- Sample260604-e6ypzahz4y
- SHA256 94f61e21488a3a0468e9450eb0e2478e0d75e7c2ae2c812220dac0b98e8ce0dd
- MD5 9a0aca90a4ae3d5460182ec060fe3a5c
- SHA1 0ef86df622ab9fa36e3927d661d8f38d3f37e3ee
- SHA512 f1be01dd68d1dcf683bb52ee9de0b44b67ce7fdc54ea70480cd1d4b1d149af8b1e572cee4938d978679f63cde72ca0c2b4cca688fdb145cc0bf33d1823ed6273
- SSDEEP 49152:PabH/6abH/wtTToonbXaIHy5DabH/FabH/wtTToonbXaIHy5DgjI45TMwwapIgTP:B/nbXaPa/nbXaPNLapI2LapI9
- TLSH T19F66392272E204A9D599C071DF16823597D13C798FF197EBB285B2C92F729D03B3970A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_9a0aca90a4ae3d5460182ec060fe3a5c_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_9a0aca90a4ae3d5460182ec060fe3a5c_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_9a0aca90a4ae3d5460182ec060fe3a5c_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 6.7MB
- SHA256 94f61e21488a3a0468e9450eb0e2478e0d75e7c2ae2c812220dac0b98e8ce0dd
- MD5 9a0aca90a4ae3d5460182ec060fe3a5c
- SHA1 0ef86df622ab9fa36e3927d661d8f38d3f37e3ee
- SHA512 f1be01dd68d1dcf683bb52ee9de0b44b67ce7fdc54ea70480cd1d4b1d149af8b1e572cee4938d978679f63cde72ca0c2b4cca688fdb145cc0bf33d1823ed6273
- SSDEEP 49152:PabH/6abH/wtTToonbXaIHy5DabH/FabH/wtTToonbXaIHy5DgjI45TMwwapIgTP:B/nbXaPa/nbXaPNLapI2LapI9
- TLSH T19F66392272E204A9D599C071DF16823597D13C798FF197EBB285B2C92F729D03B3970A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1