General
- Target 2026-07-12_8390c8f240b23f5c371bb8e05ef6fe5f_cloudeye_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 8.3MB
- Sample260712-k2saaafs7r
- SHA256 5cecdb8588e941abefa2d3187ff65505c4de11ecb40c8f412dc686cb11e2d5a4
- MD5 8390c8f240b23f5c371bb8e05ef6fe5f
- SHA1 25c09f6022cb9c02069da943e1d43ba9f69830c9
- SHA512 a9af6705301515b78f7a0dfd717c0d0f70070176af556924e10fe18dc4e7e675e6da92c782a426c670e045ef7450f4a1a0deb561fa9ef4a10d5a42ee66e11026
- SSDEEP 98304:3RV0oAaldmdmnpd0oAaldmdmnp8Tpo0oAaldmdmnp:38Kmd04Kmd0KTplKmd0
- TLSH T1F5963803A29548D9D15AC074DE46C231EB227C5D4BF265FB3690BADA3E73AD03B3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_8390c8f240b23f5c371bb8e05ef6fe5f_cloudeye_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_8390c8f240b23f5c371bb8e05ef6fe5f_cloudeye_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260710-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_8390c8f240b23f5c371bb8e05ef6fe5f_cloudeye_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 8.3MB
- SHA256 5cecdb8588e941abefa2d3187ff65505c4de11ecb40c8f412dc686cb11e2d5a4
- MD5 8390c8f240b23f5c371bb8e05ef6fe5f
- SHA1 25c09f6022cb9c02069da943e1d43ba9f69830c9
- SHA512 a9af6705301515b78f7a0dfd717c0d0f70070176af556924e10fe18dc4e7e675e6da92c782a426c670e045ef7450f4a1a0deb561fa9ef4a10d5a42ee66e11026
- SSDEEP 98304:3RV0oAaldmdmnpd0oAaldmdmnp8Tpo0oAaldmdmnp:38Kmd04Kmd0KTplKmd0
- TLSH T1F5963803A29548D9D15AC074DE46C231EB227C5D4BF265FB3690BADA3E73AD03B3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1