General
- Target 2026-07-12_5793fbbed1cff83a3121b5f8f33b26a0_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_vidar
- Size 4.1MB
- Sample260712-qewbbacv4v
- SHA256 5fc626b642b8f69825469d76f1585537b6fc98aecabb2b25d504f3106ecf0ce6
- MD5 5793fbbed1cff83a3121b5f8f33b26a0
- SHA1 e6dc9afb311ed4d49012cee5cde600c20ab273c5
- SHA512 9305c33d5e1ce83adb2fcf6ed40bdc3986bdad9249500a956ff6cbbbd797569d25888bd40a0cf93c3b497970a22b6c5f96dc552f2c2f0e1ad23eddbf982eee86
- SSDEEP 49152:ZMHCo9OW6b2Fb0n+LZyZtPToxpOA42wAy2F04yhg7YpPBnnZZTdqML5lYom8HCoI:KVOz2zmZZTdqMLfzVON
- TLSH T116169D4562A840D8ECAAE17CC9274A7BD7B2FC811531C79F1274FB4A5F372A24D2E361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_5793fbbed1cff83a3121b5f8f33b26a0_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_5793fbbed1cff83a3121b5f8f33b26a0_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_5793fbbed1cff83a3121b5f8f33b26a0_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_vidar
- Size 4.1MB
- SHA256 5fc626b642b8f69825469d76f1585537b6fc98aecabb2b25d504f3106ecf0ce6
- MD5 5793fbbed1cff83a3121b5f8f33b26a0
- SHA1 e6dc9afb311ed4d49012cee5cde600c20ab273c5
- SHA512 9305c33d5e1ce83adb2fcf6ed40bdc3986bdad9249500a956ff6cbbbd797569d25888bd40a0cf93c3b497970a22b6c5f96dc552f2c2f0e1ad23eddbf982eee86
- SSDEEP 49152:ZMHCo9OW6b2Fb0n+LZyZtPToxpOA42wAy2F04yhg7YpPBnnZZTdqML5lYom8HCoI:KVOz2zmZZTdqMLfzVON
- TLSH T116169D4562A840D8ECAAE17CC9274A7BD7B2FC811531C79F1274FB4A5F372A24D2E361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application