General
- Target 2026-07-18_ea9ec7fccdaac5083dec9a86d6afe7a8_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn_vidar
- Size 352KB
- Sample260718-r2fptag16z
- SHA256 0a18a8c471d1a3079d3907ac8a3d89b5a20c6d63cfa994c23662457afdbe6165
- MD5 ea9ec7fccdaac5083dec9a86d6afe7a8
- SHA1 bda5ca238b2afaf6461c08ba88d1e6d3b1e2e67e
- SHA512 2a61d57d0217d65d294d8f4cb5e6af2f8ba60ee13fb3aad5378879dbe4a0d5ad72d6cd4f89db41fe64cde190290bbdded724fcf265dcecf778ab8176aa592a9e
- SSDEEP 6144:UsLqdufVUNDaovudZJp30u31EwZGIMs2Qpra2WjvsCr5bJ8M:PFUNDaovudzp3hlVZGIM9r5bJ8M
- TLSH T1DA749F13BA5030EDE46687F09461965AFB327D310BA49E1B2391A7152E33343BEF671B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_ea9ec7fccdaac5083dec9a86d6afe7a8_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_ea9ec7fccdaac5083dec9a86d6afe7a8_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_ea9ec7fccdaac5083dec9a86d6afe7a8_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn_vidar
- Size 352KB
- SHA256 0a18a8c471d1a3079d3907ac8a3d89b5a20c6d63cfa994c23662457afdbe6165
- MD5 ea9ec7fccdaac5083dec9a86d6afe7a8
- SHA1 bda5ca238b2afaf6461c08ba88d1e6d3b1e2e67e
- SHA512 2a61d57d0217d65d294d8f4cb5e6af2f8ba60ee13fb3aad5378879dbe4a0d5ad72d6cd4f89db41fe64cde190290bbdded724fcf265dcecf778ab8176aa592a9e
- SSDEEP 6144:UsLqdufVUNDaovudZJp30u31EwZGIMs2Qpra2WjvsCr5bJ8M:PFUNDaovudzp3hlVZGIM9r5bJ8M
- TLSH T1DA749F13BA5030EDE46687F09461965AFB327D310BA49E1B2391A7152E33343BEF671B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory