General
- Target 2026-07-20_567b38c6d3d5b31090a3a53d8ad960e1_cobalt-strike_elex_icedid_njrat_vidar
- Size 170KB
- Sample260720-nye3bsgz2n
- SHA256 64513af77ca138f8c27fb93df8bb314019ca235fb33b5a4b5b9b8c3456db7107
- MD5 567b38c6d3d5b31090a3a53d8ad960e1
- SHA1 5ae208d7fbe3bf9ab37ade98a4345ae10d651cbb
- SHA512 a0e63811c1b2cc3386b3081417ecbcdb866ba1fc0256ac754c1b44898e317c8d68ed043fc2bca25e24c3a8620fb4dd791b52c067e57180760c12464f78b88f73
- SSDEEP 3072:tz+DePj3CIUdoj1p/filrEjHODVbpEqyLB/0ooJav70p+kW8RUtGn1/C:wD3IUdSp/3uDVVU0Tavwp+GR+
- TLSH T10E04AE17B3A534F9E273833588610686B77578720BE49BEF039446766F232D0AD3AF61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_567b38c6d3d5b31090a3a53d8ad960e1_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_567b38c6d3d5b31090a3a53d8ad960e1_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_567b38c6d3d5b31090a3a53d8ad960e1_cobalt-strike_elex_icedid_njrat_vidar
- Size 170KB
- SHA256 64513af77ca138f8c27fb93df8bb314019ca235fb33b5a4b5b9b8c3456db7107
- MD5 567b38c6d3d5b31090a3a53d8ad960e1
- SHA1 5ae208d7fbe3bf9ab37ade98a4345ae10d651cbb
- SHA512 a0e63811c1b2cc3386b3081417ecbcdb866ba1fc0256ac754c1b44898e317c8d68ed043fc2bca25e24c3a8620fb4dd791b52c067e57180760c12464f78b88f73
- SSDEEP 3072:tz+DePj3CIUdoj1p/filrEjHODVbpEqyLB/0ooJav70p+kW8RUtGn1/C:wD3IUdSp/3uDVVU0Tavwp+GR+
- TLSH T10E04AE17B3A534F9E273833588610686B77578720BE49BEF039446766F232D0AD3AF61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory