General
- Target 2026-07-10_87eb549d48e49d3e8bbca390e472c5a8_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 3.6MB
- Sample260710-fx2wpsdv4n
- SHA256 5bd011f7b1f502c8f37356a067aedc8965089f11d94161bf7a059f9f17cefef1
- MD5 87eb549d48e49d3e8bbca390e472c5a8
- SHA1 e67e3c658e7016f2fae35a935c3dc8502300863b
- SHA512 b9cdc99a09e2b27f02c4b15f319580d64c9ac069413d40d3e228f885e0e8715e201b9353b349995f4d30c87293a67a92b13478c00cf6f0b7ff6234b27af72228
- SSDEEP 49152:wabH/qabH/w3NCLTZNYfkNYXy6+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzGD:+CgQgy70oAaldmdmnp
- TLSH T1B9065A03B29444E9D156C138DE56C131EB227C5D0BF1A9EF32807ADA2E73AD17B39B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_87eb549d48e49d3e8bbca390e472c5a8_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_87eb549d48e49d3e8bbca390e472c5a8_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_87eb549d48e49d3e8bbca390e472c5a8_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 3.6MB
- SHA256 5bd011f7b1f502c8f37356a067aedc8965089f11d94161bf7a059f9f17cefef1
- MD5 87eb549d48e49d3e8bbca390e472c5a8
- SHA1 e67e3c658e7016f2fae35a935c3dc8502300863b
- SHA512 b9cdc99a09e2b27f02c4b15f319580d64c9ac069413d40d3e228f885e0e8715e201b9353b349995f4d30c87293a67a92b13478c00cf6f0b7ff6234b27af72228
- SSDEEP 49152:wabH/qabH/w3NCLTZNYfkNYXy6+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzGD:+CgQgy70oAaldmdmnp
- TLSH T1B9065A03B29444E9D156C138DE56C131EB227C5D0BF1A9EF32807ADA2E73AD17B39B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1