General
- Target 2026-07-20_86c3f80f9738ceb5fc6e92c0a8222024_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 4.2MB
- Sample260720-nnp5jsgv8p
- SHA256 4c49514e66520184a4d9822ec1dc5c7014bfeba452f893310e19552b5349a9ea
- MD5 86c3f80f9738ceb5fc6e92c0a8222024
- SHA1 e29dc6d80667b7b568637f8be4c483d5dd6d2f21
- SHA512 be3b7ae631f5ba3a15b1970f09c4e7f43bbbb01d7fda19375f21d6917e6225044f0ef4a279d7534f6f0ad3b75e25786684e013d19ac42f93d9a541229f7cfaee
- SSDEEP 49152:wabH/nO53NCLTYabH/3O53NCLTUabH/iO53NCLTYabH/3O53NCLT+gjI45TMwwai:gCIC5CICcLapI9
- TLSH T15A164A2272A104A9D5AAC035DF55862197E17C794BF0D7AFB38072C92F736D07A39B0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_86c3f80f9738ceb5fc6e92c0a8222024_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_86c3f80f9738ceb5fc6e92c0a8222024_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_86c3f80f9738ceb5fc6e92c0a8222024_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 4.2MB
- SHA256 4c49514e66520184a4d9822ec1dc5c7014bfeba452f893310e19552b5349a9ea
- MD5 86c3f80f9738ceb5fc6e92c0a8222024
- SHA1 e29dc6d80667b7b568637f8be4c483d5dd6d2f21
- SHA512 be3b7ae631f5ba3a15b1970f09c4e7f43bbbb01d7fda19375f21d6917e6225044f0ef4a279d7534f6f0ad3b75e25786684e013d19ac42f93d9a541229f7cfaee
- SSDEEP 49152:wabH/nO53NCLTYabH/3O53NCLTUabH/iO53NCLTYabH/3O53NCLT+gjI45TMwwai:gCIC5CICcLapI9
- TLSH T15A164A2272A104A9D5AAC035DF55862197E17C794BF0D7AFB38072C92F736D07A39B0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1