General
- Target 2026-07-06_73fefcfe6da7e1bb7b10520841ef558d_cobalt-strike_elex_icedid_njrat_swisyn
- Size 3.9MB
- Sample260706-wpwmqaaz2t
- SHA256 2274cbf5a27a93e642292069e98a4cc858081ff8c6db5b62de30582fd2cb8074
- MD5 73fefcfe6da7e1bb7b10520841ef558d
- SHA1 43ac32c694d594a196cfeb536d243e3e20645570
- SHA512 4f187e7790e9c9ab6d84bd76136e279cf00f309107362ac9036f3b3297c395cf10a2a76076d5b5accd376b7e08debc0c3e2ec04bb4b333377bab480fe50ad6b9
- SSDEEP 49152:tZvWZS83kyM/+mIrXk2fotLcZL4pHfxPp1Ezh+DHh1Tb7b5ucXN5PaYR3lXE1d1r:bOZ2yE+9zdc5JP3EgFdF1CvAAZ7
- TLSH T14A168D13F2D951D8C01AC179875A9232EA71BC464B3176DF0A90BB122FB6FE06B3E715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_73fefcfe6da7e1bb7b10520841ef558d_cobalt-strike_elex_icedid_njrat_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_73fefcfe6da7e1bb7b10520841ef558d_cobalt-strike_elex_icedid_njrat_swisyn.exe
Resource
win11ltsc2024-20260630-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_73fefcfe6da7e1bb7b10520841ef558d_cobalt-strike_elex_icedid_njrat_swisyn
- Size 3.9MB
- SHA256 2274cbf5a27a93e642292069e98a4cc858081ff8c6db5b62de30582fd2cb8074
- MD5 73fefcfe6da7e1bb7b10520841ef558d
- SHA1 43ac32c694d594a196cfeb536d243e3e20645570
- SHA512 4f187e7790e9c9ab6d84bd76136e279cf00f309107362ac9036f3b3297c395cf10a2a76076d5b5accd376b7e08debc0c3e2ec04bb4b333377bab480fe50ad6b9
- SSDEEP 49152:tZvWZS83kyM/+mIrXk2fotLcZL4pHfxPp1Ezh+DHh1Tb7b5ucXN5PaYR3lXE1d1r:bOZ2yE+9zdc5JP3EgFdF1CvAAZ7
- TLSH T14A168D13F2D951D8C01AC179875A9232EA71BC464B3176DF0A90BB122FB6FE06B3E715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory