General
- Target 2026-07-04_6bd24a27198a09724a47193e92c274f5_cobalt-strike_elex_icedid_njrat_vidar
- Size 171KB
- Sample260704-qtebcafy2s
- SHA256 84bb28a463a98dfcebab1a5d0c193f4ae450f257a226ddef596323bd73abb97d
- MD5 6bd24a27198a09724a47193e92c274f5
- SHA1 b6cb952092e4ff9b4af2624eabf728e85bcc6518
- SHA512 40951e0762a0c41e513a9b8d1e7017f9a7359e7cfc599e4ba06e4abce6ec3c5a41418add995fe303395d495a74f161af195276f7893c4abcacb1bc7006119477
- SSDEEP 3072:Oz+DePj3CIUdoj1p/filrEjHODVbpEqyLB/0ooJavYXjuSk2mU:RD3IUdSp/3uDVVU0TavYiSkW
- TLSH T1D7049E57B39534F9E173873589610A86A77578320BA09BEF039442766F272D0AE3EF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_6bd24a27198a09724a47193e92c274f5_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_6bd24a27198a09724a47193e92c274f5_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_6bd24a27198a09724a47193e92c274f5_cobalt-strike_elex_icedid_njrat_vidar
- Size 171KB
- SHA256 84bb28a463a98dfcebab1a5d0c193f4ae450f257a226ddef596323bd73abb97d
- MD5 6bd24a27198a09724a47193e92c274f5
- SHA1 b6cb952092e4ff9b4af2624eabf728e85bcc6518
- SHA512 40951e0762a0c41e513a9b8d1e7017f9a7359e7cfc599e4ba06e4abce6ec3c5a41418add995fe303395d495a74f161af195276f7893c4abcacb1bc7006119477
- SSDEEP 3072:Oz+DePj3CIUdoj1p/filrEjHODVbpEqyLB/0ooJavYXjuSk2mU:RD3IUdSp/3uDVVU0TavYiSkW
- TLSH T1D7049E57B39534F9E173873589610A86A77578320BA09BEF039442766F272D0AE3EF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory