General
- Target 2026-06-29_1db2a22c6dcf9e1a9a7b36788e67c75e_cobalt-strike_elex_icedid_njrat
- Size 678KB
- Sample260630-pfcd6aex3t
- SHA256 b6105d8311713e0e641fce7784ddecccd149d799114a9dd20948d8812b9c39cb
- MD5 1db2a22c6dcf9e1a9a7b36788e67c75e
- SHA1 1bab165947b71de78872a8c32ab5e513fb381506
- SHA512 d1be1b33db60c22c689dee90a711a834bbd93e56dc51d190bce3bffdf8b59692ef55f34080ec4ae0e00ea6dd8a600bb4c57bfbfec3c0084f24213bff1ddf522d
- SSDEEP 12288:ubvHLBiQV4YifjUwwYe5kSTE16AZIPDa5ZLWUw+xkVer5+nZoyT6J54q:uLLQQyfXLe5VTEUDoZLW1+qxKz
- TLSH T141E4F10E7A69C8C6DC359E789C3486946372B8D72F505A6764C4121D8C7F2F8DE2AF38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-06-29_1db2a22c6dcf9e1a9a7b36788e67c75e_cobalt-strike_elex_icedid_njrat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_1db2a22c6dcf9e1a9a7b36788e67c75e_cobalt-strike_elex_icedid_njrat.exe
Resource
win11ltsc2024-20260630-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_1db2a22c6dcf9e1a9a7b36788e67c75e_cobalt-strike_elex_icedid_njrat
- Size 678KB
- SHA256 b6105d8311713e0e641fce7784ddecccd149d799114a9dd20948d8812b9c39cb
- MD5 1db2a22c6dcf9e1a9a7b36788e67c75e
- SHA1 1bab165947b71de78872a8c32ab5e513fb381506
- SHA512 d1be1b33db60c22c689dee90a711a834bbd93e56dc51d190bce3bffdf8b59692ef55f34080ec4ae0e00ea6dd8a600bb4c57bfbfec3c0084f24213bff1ddf522d
- SSDEEP 12288:ubvHLBiQV4YifjUwwYe5kSTE16AZIPDa5ZLWUw+xkVer5+nZoyT6J54q:uLLQQyfXLe5VTEUDoZLW1+qxKz
- TLSH T141E4F10E7A69C8C6DC359E789C3486946372B8D72F505A6764C4121D8C7F2F8DE2AF38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.