General
- Target 2026-07-06_87dbf6359f71e0d7fbb0f119c4608507_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 8.3MB
- Sample260706-wk8fqaex4r
- SHA256 e00f867850ad40fa503fd0d969cd9587f2ec92cb6449bd9a2553f6967094ba67
- MD5 87dbf6359f71e0d7fbb0f119c4608507
- SHA1 e92e9695786739937698c939920c2757773158d5
- SHA512 0766a791aaa801f8a183dbd7b6abf3835c1415efb21af67ad0d396b86cd2a9b5536089a70ebc66215dc49592c39a880bbf711ab0478b11a19a3eb054c8c344c8
- SSDEEP 49152:wabH/2turNp5Q+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyZ:c6dR0oAaldmdmnpZ
- TLSH T1A4965903A65508E9D149C034DE268232AB617C5D47F2A6FF3294BAE63E73AD03F39751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_87dbf6359f71e0d7fbb0f119c4608507_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_87dbf6359f71e0d7fbb0f119c4608507_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_87dbf6359f71e0d7fbb0f119c4608507_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 8.3MB
- SHA256 e00f867850ad40fa503fd0d969cd9587f2ec92cb6449bd9a2553f6967094ba67
- MD5 87dbf6359f71e0d7fbb0f119c4608507
- SHA1 e92e9695786739937698c939920c2757773158d5
- SHA512 0766a791aaa801f8a183dbd7b6abf3835c1415efb21af67ad0d396b86cd2a9b5536089a70ebc66215dc49592c39a880bbf711ab0478b11a19a3eb054c8c344c8
- SSDEEP 49152:wabH/2turNp5Q+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyZ:c6dR0oAaldmdmnpZ
- TLSH T1A4965903A65508E9D149C034DE268232AB617C5D47F2A6FF3294BAE63E73AD03F39751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1