General
- Target 2026-07-19_ae0eb8048adda76039bb776447f09acf_cobalt-strike_coinminer_elex_icedid_njrat
- Size 961KB
- Sample260719-1f183afy7w
- SHA256 859ee05416361fbae1194d11a0339d92d8186cc9354b6ce14fc44abec28138d0
- MD5 ae0eb8048adda76039bb776447f09acf
- SHA1 6ee5acc5ad1d25ef02d26fe91259dd99fdd5ae6b
- SHA512 098bb810d3236b3f651b745fb787ea1a590fed771a80eda1ad372b397c1891e344c8dc037cea2c6be9d0710e7396aec05583743464ed7d8dc515d97e85196efb
- SSDEEP 12288:86Wq4aaE6KwyF5L0Y2D1PqLb6Wq44er5+nZoyfL1W0mer5+nIwaJVer5+nBos:6thEVaPqLBt0EE1T
- TLSH T156255A07B2559CD3CBE54A74DC24C6A55322B89DAFF34673788453CE7C6B284BE26B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-19_ae0eb8048adda76039bb776447f09acf_cobalt-strike_coinminer_elex_icedid_njrat.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_ae0eb8048adda76039bb776447f09acf_cobalt-strike_coinminer_elex_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_ae0eb8048adda76039bb776447f09acf_cobalt-strike_coinminer_elex_icedid_njrat
- Size 961KB
- SHA256 859ee05416361fbae1194d11a0339d92d8186cc9354b6ce14fc44abec28138d0
- MD5 ae0eb8048adda76039bb776447f09acf
- SHA1 6ee5acc5ad1d25ef02d26fe91259dd99fdd5ae6b
- SHA512 098bb810d3236b3f651b745fb787ea1a590fed771a80eda1ad372b397c1891e344c8dc037cea2c6be9d0710e7396aec05583743464ed7d8dc515d97e85196efb
- SSDEEP 12288:86Wq4aaE6KwyF5L0Y2D1PqLb6Wq44er5+nZoyfL1W0mer5+nIwaJVer5+nBos:6thEVaPqLBt0EE1T
- TLSH T156255A07B2559CD3CBE54A74DC24C6A55322B89DAFF34673788453CE7C6B284BE26B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies visibility of file extensions in Explorer
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
AutoIT Executable
AutoIT scripts compiled to PE executables.