General
- Target 2026-07-08_4f5271107c8e138be819084ff5297b4b_cobalt-strike_elex_icedid_vidar
- Size 878KB
- Sample260708-fanessaz71
- SHA256 24ea3d58a97422dcee7313db6c7d5601a411b3af203b0d614b615ed05dedd6f8
- MD5 4f5271107c8e138be819084ff5297b4b
- SHA1 734586ad1488799d2721fc6b7968275372a53008
- SHA512 03f09a775fd2a4f042407113b47bdb6897af45cefa0e17448fda3d91b25ff0c030d373a8975cd2792114725675a442654c174fad6b1d17f974414ba87b40607a
- SSDEEP 12288:+0p36WaFncAhK0MoIY8Cz6RxRbxqaw8pD0Imnufw5iAqn0mLrJe5u6qDNT:+0p0ncArIBUebxqEp2Dqn0mP36UT
- TLSH T1B6159D893E2048F7F41975B50C2562E14A23D8275926377FDF559FAFBC3A64A382A330
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_4f5271107c8e138be819084ff5297b4b_cobalt-strike_elex_icedid_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_4f5271107c8e138be819084ff5297b4b_cobalt-strike_elex_icedid_vidar.exe
Resource
win11ltsc2024-20260706-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_4f5271107c8e138be819084ff5297b4b_cobalt-strike_elex_icedid_vidar
- Size 878KB
- SHA256 24ea3d58a97422dcee7313db6c7d5601a411b3af203b0d614b615ed05dedd6f8
- MD5 4f5271107c8e138be819084ff5297b4b
- SHA1 734586ad1488799d2721fc6b7968275372a53008
- SHA512 03f09a775fd2a4f042407113b47bdb6897af45cefa0e17448fda3d91b25ff0c030d373a8975cd2792114725675a442654c174fad6b1d17f974414ba87b40607a
- SSDEEP 12288:+0p36WaFncAhK0MoIY8Cz6RxRbxqaw8pD0Imnufw5iAqn0mLrJe5u6qDNT:+0p0ncArIBUebxqEp2Dqn0mP36UT
- TLSH T1B6159D893E2048F7F41975B50C2562E14A23D8275926377FDF559FAFBC3A64A382A330
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1