General
- Target 2026-07-07_e9d227608f33ae056afd780a8f5e3c0a_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 1.3MB
- Sample260707-v1t3labt4m
- SHA256 cdcefc57e7f877e7a61096f0ed34c05f54e08c95a9bdc15788cfcd187e37ff0f
- MD5 e9d227608f33ae056afd780a8f5e3c0a
- SHA1 b3e2e6e9af298f52bb22c98363fd5fb1d7cb8f2c
- SHA512 4913d4e6d6e4c733c451fe3577ac8c0b713831327839d8176335a412f334b1110a092c909d78bd4675db7a6a7a83f88c0236044e99d6a4ed4e7d4da922075326
- SSDEEP 24576:PFOaeGqNmLX2SP2lCVztUwDPh0lhSMXlW0j:tyFNmKc20zS5V
- TLSH T141556B1A625C01AAF1679274C89DD636E6727C1613D059CB02E17E673F3F2E23E7A311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_e9d227608f33ae056afd780a8f5e3c0a_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_e9d227608f33ae056afd780a8f5e3c0a_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_e9d227608f33ae056afd780a8f5e3c0a_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 1.3MB
- SHA256 cdcefc57e7f877e7a61096f0ed34c05f54e08c95a9bdc15788cfcd187e37ff0f
- MD5 e9d227608f33ae056afd780a8f5e3c0a
- SHA1 b3e2e6e9af298f52bb22c98363fd5fb1d7cb8f2c
- SHA512 4913d4e6d6e4c733c451fe3577ac8c0b713831327839d8176335a412f334b1110a092c909d78bd4675db7a6a7a83f88c0236044e99d6a4ed4e7d4da922075326
- SSDEEP 24576:PFOaeGqNmLX2SP2lCVztUwDPh0lhSMXlW0j:tyFNmKc20zS5V
- TLSH T141556B1A625C01AAF1679274C89DD636E6727C1613D059CB02E17E673F3F2E23E7A311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1