General
- Target 2026-07-08_4f20210e95c2af1e9818861122f975c0_cobalt-strike_elex_hijackloader_icedid_vidar
- Size 1.4MB
- Sample260708-faqj6abx3p
- SHA256 909a87689d4deeefeeee213232e4aa5e1977231d68d7bda50bca4168c3e13d85
- MD5 4f20210e95c2af1e9818861122f975c0
- SHA1 e5bf098ec88f4b470cce5d9dbe65132eec7dcb37
- SHA512 adc787c95f2c648ff206b21b7fa4df63c755ca9fc325831fe1a0cd34cde2352d37b8cd2874b7da6a393aea5639ea8942790587defc785487f1fce0e2300379c1
- SSDEEP 24576:ePjO7KX53RTh0tFda3X4HOsRgiiplc+lPY5D5TvinrmjxD0wlOjwGM:erOO53RTqtiX4usuzy56rgIAOjm
- TLSH T138650625A6A48AB1D16B61348553955DD232BC15CF138FCF32946FCEBFF26C0A939232
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_4f20210e95c2af1e9818861122f975c0_cobalt-strike_elex_hijackloader_icedid_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_4f20210e95c2af1e9818861122f975c0_cobalt-strike_elex_hijackloader_icedid_vidar.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_4f20210e95c2af1e9818861122f975c0_cobalt-strike_elex_hijackloader_icedid_vidar
- Size 1.4MB
- SHA256 909a87689d4deeefeeee213232e4aa5e1977231d68d7bda50bca4168c3e13d85
- MD5 4f20210e95c2af1e9818861122f975c0
- SHA1 e5bf098ec88f4b470cce5d9dbe65132eec7dcb37
- SHA512 adc787c95f2c648ff206b21b7fa4df63c755ca9fc325831fe1a0cd34cde2352d37b8cd2874b7da6a393aea5639ea8942790587defc785487f1fce0e2300379c1
- SSDEEP 24576:ePjO7KX53RTh0tFda3X4HOsRgiiplc+lPY5D5TvinrmjxD0wlOjwGM:erOO53RTqtiX4usuzy56rgIAOjm
- TLSH T138650625A6A48AB1D16B61348553955DD232BC15CF138FCF32946FCEBFF26C0A939232
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.