General
- Target 2026-07-20_5eaeddcc58f8c7f67f9c9a3c3eea6544_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn_vidar
- Size 1.5MB
- Sample260720-v8kh5abw7w
- SHA256 2934c12f0cc3b68d11df638e5915991bad15604cccc49a059fd0bdcbef8c4e94
- MD5 5eaeddcc58f8c7f67f9c9a3c3eea6544
- SHA1 0a6efc1195d2e9c7734c93c0a842dbdfdc796974
- SHA512 0546cd57a6f203a126a8dd16bf4320ef051236333f2ea4469b95e90a2d90b250107aaf64c3f6241143adbbd9968922e21f93fe80755d0a15c9cffd785e0f177e
- SSDEEP 12288:PFUNDaB6aIq+YRG8z3JXop60MjS5Aiu8TkNAo5zxTdhHzsGblPcrAMsgi8NMB7Dc:PFOaBl+YRlz3p0MjS5AWcxTBJcrJQK9V
- TLSH T165756E495B68D96DE363D17C5054E23DE6363C220FC2920A42EA62FD1FB733475ABB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_5eaeddcc58f8c7f67f9c9a3c3eea6544_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_5eaeddcc58f8c7f67f9c9a3c3eea6544_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_5eaeddcc58f8c7f67f9c9a3c3eea6544_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn_vidar
- Size 1.5MB
- SHA256 2934c12f0cc3b68d11df638e5915991bad15604cccc49a059fd0bdcbef8c4e94
- MD5 5eaeddcc58f8c7f67f9c9a3c3eea6544
- SHA1 0a6efc1195d2e9c7734c93c0a842dbdfdc796974
- SHA512 0546cd57a6f203a126a8dd16bf4320ef051236333f2ea4469b95e90a2d90b250107aaf64c3f6241143adbbd9968922e21f93fe80755d0a15c9cffd785e0f177e
- SSDEEP 12288:PFUNDaB6aIq+YRG8z3JXop60MjS5Aiu8TkNAo5zxTdhHzsGblPcrAMsgi8NMB7Dc:PFOaBl+YRlz3p0MjS5AWcxTBJcrJQK9V
- TLSH T165756E495B68D96DE363D17C5054E23DE6363C220FC2920A42EA62FD1FB733475ABB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2