General
- Target 2026-07-08_76f2367d35f6759c5367f57c52469fa9_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 2.9MB
- Sample260708-2askeaay7x
- SHA256 8b0e3f477ce2f60bae72edfa22a4bce40538af10c8c9fa4a4bb72b9b4f2169da
- MD5 76f2367d35f6759c5367f57c52469fa9
- SHA1 599d0be2194dfe54fc4c68c6dc104a0aa1de1caa
- SHA512 ba59703b72ae15f08c856dddb908faae3a65f054597a9faf28a63ad71468737e04a92652aeb3677c9c911d2d6806970f60cecf7bdf2231b49267b43172496276
- SSDEEP 12288:P4Ryed8I7r/7mFUWcnhzd5qcQiHmNJLB9unmwY:P4R5CIH/77zd50iGnB9umwY
- TLSH T1CBE56C27B74408EAEC66C178A9628116E9317C250760E9DF63C07B262E337D17F79B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_76f2367d35f6759c5367f57c52469fa9_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_76f2367d35f6759c5367f57c52469fa9_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_76f2367d35f6759c5367f57c52469fa9_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 2.9MB
- SHA256 8b0e3f477ce2f60bae72edfa22a4bce40538af10c8c9fa4a4bb72b9b4f2169da
- MD5 76f2367d35f6759c5367f57c52469fa9
- SHA1 599d0be2194dfe54fc4c68c6dc104a0aa1de1caa
- SHA512 ba59703b72ae15f08c856dddb908faae3a65f054597a9faf28a63ad71468737e04a92652aeb3677c9c911d2d6806970f60cecf7bdf2231b49267b43172496276
- SSDEEP 12288:P4Ryed8I7r/7mFUWcnhzd5qcQiHmNJLB9unmwY:P4R5CIH/77zd50iGnB9umwY
- TLSH T1CBE56C27B74408EAEC66C178A9628116E9317C250760E9DF63C07B262E337D17F79B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1