General
- Target 2026-07-05_5786978c827211b87241b2e10b5909e0_cobalt-strike_elex_icedid_njrat_swisyn_vidar
- Size 307KB
- Sample260705-nt3ylab17z
- SHA256 119939a3ea8b15044155cad9b0ae8b8fdd477580abcfd7f00c8d0842e87892dd
- MD5 5786978c827211b87241b2e10b5909e0
- SHA1 8ccfcf299bf75ee95662d93d4ae2a65ab53b1f2b
- SHA512 9bdce959c59e74bd043be8aef18657090fc0be68d5d545f4b32d838e989ef343f9d7ff9d719ce1142a993b120f590ef63beccfc182ffb0d359d9d55ff08c55a3
- SSDEEP 3072:XVqoCl/YgjxEufVU0TbTyDDalKtkLMsIMPCdz1fy0+w6WFK14YYBGvNbtvDXSAbg:XsLqdufVUNDaSkm3zdFg9YBeNbk/1
- TLSH T14D647E137AA020BAD46386F14CA59A15F7713D760BA09E9F126477262F333837EB531B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_5786978c827211b87241b2e10b5909e0_cobalt-strike_elex_icedid_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_5786978c827211b87241b2e10b5909e0_cobalt-strike_elex_icedid_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_5786978c827211b87241b2e10b5909e0_cobalt-strike_elex_icedid_njrat_swisyn_vidar
- Size 307KB
- SHA256 119939a3ea8b15044155cad9b0ae8b8fdd477580abcfd7f00c8d0842e87892dd
- MD5 5786978c827211b87241b2e10b5909e0
- SHA1 8ccfcf299bf75ee95662d93d4ae2a65ab53b1f2b
- SHA512 9bdce959c59e74bd043be8aef18657090fc0be68d5d545f4b32d838e989ef343f9d7ff9d719ce1142a993b120f590ef63beccfc182ffb0d359d9d55ff08c55a3
- SSDEEP 3072:XVqoCl/YgjxEufVU0TbTyDDalKtkLMsIMPCdz1fy0+w6WFK14YYBGvNbtvDXSAbg:XsLqdufVUNDaSkm3zdFg9YBeNbk/1
- TLSH T14D647E137AA020BAD46386F14CA59A15F7713D760BA09E9F126477262F333837EB531B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory