General
- Target 2026-07-15_c9c8221a025142fd4c977d78e45098a5_cobalt-strike_elex_icedid_njrat_remcos_vidar
- Size 380KB
- Sample260715-lbmsjsbz3z
- SHA256 013c4aff2590312b2db0c91eeb536d72222eda0755776459d10721f7719d09d2
- MD5 c9c8221a025142fd4c977d78e45098a5
- SHA1 2c9eee9d848fc7e0094e86da44e15f0b71b2a0ed
- SHA512 ffd4100129926e02e4fdecc32f5bc0cdbdffe420f9bf7560184e2ea613ff169fceb09fda7c407b4070dce6646502d19830608ac09cc8733a3ca4e29d97a5e0a8
- SSDEEP 6144:IVfhgujXXdnf1VDU2mMQTyydY3xl3D+qAM4mF5sAOj/dxCwfiUC8A:yJgubtnf1W298gPiW4OSdxm78A
- TLSH T19D84AE5673A81CE9E83781388E529A16E7B27C510720C7DF1364976E9F736E0AD3DB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_c9c8221a025142fd4c977d78e45098a5_cobalt-strike_elex_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_c9c8221a025142fd4c977d78e45098a5_cobalt-strike_elex_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_c9c8221a025142fd4c977d78e45098a5_cobalt-strike_elex_icedid_njrat_remcos_vidar
- Size 380KB
- SHA256 013c4aff2590312b2db0c91eeb536d72222eda0755776459d10721f7719d09d2
- MD5 c9c8221a025142fd4c977d78e45098a5
- SHA1 2c9eee9d848fc7e0094e86da44e15f0b71b2a0ed
- SHA512 ffd4100129926e02e4fdecc32f5bc0cdbdffe420f9bf7560184e2ea613ff169fceb09fda7c407b4070dce6646502d19830608ac09cc8733a3ca4e29d97a5e0a8
- SSDEEP 6144:IVfhgujXXdnf1VDU2mMQTyydY3xl3D+qAM4mF5sAOj/dxCwfiUC8A:yJgubtnf1W298gPiW4OSdxm78A
- TLSH T19D84AE5673A81CE9E83781388E529A16E7B27C510720C7DF1364976E9F736E0AD3DB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.