General
- Target 2026-07-16_7385c59e3cd10e26b979c1f064ba9197_cobalt-strike_elex_icedid_swisyn_vidar
- Size 263KB
- Sample260716-db677abx6m
- SHA256 ad15617190f87a058555a2a228e3c4b72d91cb504266b8fd52984d375964c029
- MD5 7385c59e3cd10e26b979c1f064ba9197
- SHA1 906e6e613d000d82a9866dbe0db9dd177e2c820b
- SHA512 1753a3ea98d0eaa9c61adc8a2ec659a9bde0232e96ce4106af9edaf352bb94040a94234f29bf1f53b0a8c22a4b46e5cd674f4a2788fa5f1fc7a6614e3258c4f7
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalqhIm51g1oPKlbiI/0Wp7gZElwarCA1+vag5U:UsLqdufVUNDayT1ioS5/j79RKigW
- TLSH T1D8443A13BB1830FAD41282FC58B5867AFB227D350B60AF5B239167591E33243BDB561B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_7385c59e3cd10e26b979c1f064ba9197_cobalt-strike_elex_icedid_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_7385c59e3cd10e26b979c1f064ba9197_cobalt-strike_elex_icedid_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_7385c59e3cd10e26b979c1f064ba9197_cobalt-strike_elex_icedid_swisyn_vidar
- Size 263KB
- SHA256 ad15617190f87a058555a2a228e3c4b72d91cb504266b8fd52984d375964c029
- MD5 7385c59e3cd10e26b979c1f064ba9197
- SHA1 906e6e613d000d82a9866dbe0db9dd177e2c820b
- SHA512 1753a3ea98d0eaa9c61adc8a2ec659a9bde0232e96ce4106af9edaf352bb94040a94234f29bf1f53b0a8c22a4b46e5cd674f4a2788fa5f1fc7a6614e3258c4f7
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalqhIm51g1oPKlbiI/0Wp7gZElwarCA1+vag5U:UsLqdufVUNDayT1ioS5/j79RKigW
- TLSH T1D8443A13BB1830FAD41282FC58B5867AFB227D350B60AF5B239167591E33243BDB561B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory