General
- Target 2026-07-15_239961321d040ef92efc2848b277bb80_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 2.9MB
- Sample260716-cka1nset8z
- SHA256 f626bb11cc649827b000491602699d9091971ee4da25331a689f946ee2c8e56a
- MD5 239961321d040ef92efc2848b277bb80
- SHA1 74ffd91b00cdc94213fedf4f940727863eaa842e
- SHA512 f3848e88e0252e9ae8bd00d1d1380e8cc58e53fdca33989a4d1d269bd76ab593f063262eb9508d8fb8ce95d656e6df5923e753d62bc28510a9780fb886310774
- SSDEEP 12288:P4Ryed8I7r/7mFUWcnhzd5qcQiHmNJLB9unm4i:P4R5CIH/77zd50iGnB9um4i
- TLSH T1CAE56C27B74408BAEC66C178A9628116E9317C250760E9DF63C07B262E337D17F79B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_239961321d040ef92efc2848b277bb80_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_239961321d040ef92efc2848b277bb80_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_239961321d040ef92efc2848b277bb80_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 2.9MB
- SHA256 f626bb11cc649827b000491602699d9091971ee4da25331a689f946ee2c8e56a
- MD5 239961321d040ef92efc2848b277bb80
- SHA1 74ffd91b00cdc94213fedf4f940727863eaa842e
- SHA512 f3848e88e0252e9ae8bd00d1d1380e8cc58e53fdca33989a4d1d269bd76ab593f063262eb9508d8fb8ce95d656e6df5923e753d62bc28510a9780fb886310774
- SSDEEP 12288:P4Ryed8I7r/7mFUWcnhzd5qcQiHmNJLB9unm4i:P4R5CIH/77zd50iGnB9um4i
- TLSH T1CAE56C27B74408BAEC66C178A9628116E9317C250760E9DF63C07B262E337D17F79B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1