General
- Target 2026-07-18_1a434ec7d1203f7ad7abdcfa151376e6_cobalt-strike_elex_icedid_njrat_vidar
- Size 169KB
- Sample260718-kl5wfaes6l
- SHA256 441d1be3ba74962850c351ad85c495336b15437b306f8c2fb29f4a5e880a1230
- MD5 1a434ec7d1203f7ad7abdcfa151376e6
- SHA1 ea45f56cf0623a97a8d3e915d8f8f2805419e07d
- SHA512 d77b93c3e9407ef2ffe4f55552564a8c69765ea54bb269babdc7b3935bd5fc62eebb5672cf95ae00d31544c0d255d69b247c9583a1c8f473275fc2848b3c3e99
- SSDEEP 3072:Rz+DePj3CIUdoj1p/filrEjHODVbpEqyLB/0ooJavWyG+t0egAHw:MD3IUdSp/3uDVVU0TavrlE
- TLSH T166049E57B3A535F9E173823988610682B775793607A09BEF079443766F232D0AE3EF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_1a434ec7d1203f7ad7abdcfa151376e6_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_1a434ec7d1203f7ad7abdcfa151376e6_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_1a434ec7d1203f7ad7abdcfa151376e6_cobalt-strike_elex_icedid_njrat_vidar
- Size 169KB
- SHA256 441d1be3ba74962850c351ad85c495336b15437b306f8c2fb29f4a5e880a1230
- MD5 1a434ec7d1203f7ad7abdcfa151376e6
- SHA1 ea45f56cf0623a97a8d3e915d8f8f2805419e07d
- SHA512 d77b93c3e9407ef2ffe4f55552564a8c69765ea54bb269babdc7b3935bd5fc62eebb5672cf95ae00d31544c0d255d69b247c9583a1c8f473275fc2848b3c3e99
- SSDEEP 3072:Rz+DePj3CIUdoj1p/filrEjHODVbpEqyLB/0ooJavWyG+t0egAHw:MD3IUdSp/3uDVVU0TavrlE
- TLSH T166049E57B3A535F9E173823988610682B775793607A09BEF079443766F232D0AE3EF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory