General
- Target 2026-07-12_8ebecd3e39a2847285a1107592876b62_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 9.3MB
- Sample260712-kwvs8ae18j
- SHA256 0d001a507731b9f950979446322740fccce915a6fd03c6c9015bf67315b13e59
- MD5 8ebecd3e39a2847285a1107592876b62
- SHA1 3322fb31831ca0e3a969e57dcfa8bea09ceaa9cf
- SHA512 e70e1e3f2c3addb0b5c5337cbb2c9f47c8bc252268f48b8327af8660e39ea608fa7c1187413fefb53c4cd3f35a408aee7cf7c849d91b0ca79cd4af9e081bfee2
- SSDEEP 98304:JWrM0oAaldmdmnpS0oAaldm30oAaldmdmnpTgxLapI9:JWrpKmd0BKmkKmd0OcI9
- TLSH T185A64913B29104E9E159D035CF469231EBA17C5D4BF1A6EF3280B6D92E73AE03B3A715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_8ebecd3e39a2847285a1107592876b62_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_8ebecd3e39a2847285a1107592876b62_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_8ebecd3e39a2847285a1107592876b62_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 9.3MB
- SHA256 0d001a507731b9f950979446322740fccce915a6fd03c6c9015bf67315b13e59
- MD5 8ebecd3e39a2847285a1107592876b62
- SHA1 3322fb31831ca0e3a969e57dcfa8bea09ceaa9cf
- SHA512 e70e1e3f2c3addb0b5c5337cbb2c9f47c8bc252268f48b8327af8660e39ea608fa7c1187413fefb53c4cd3f35a408aee7cf7c849d91b0ca79cd4af9e081bfee2
- SSDEEP 98304:JWrM0oAaldmdmnpS0oAaldm30oAaldmdmnpTgxLapI9:JWrpKmd0BKmkKmd0OcI9
- TLSH T185A64913B29104E9E159D035CF469231EBA17C5D4BF1A6EF3280B6D92E73AE03B3A715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory