General
- Target 2026-07-20_88bb7fac71f2aa6fdfcf01f7a551b687_cobalt-strike_elex_hijackloader_icedid_njrat_stealc_vidar
- Size 1.5MB
- Sample260720-vxs15abs31
- SHA256 608e6ad64ccc7a02f97f39104e890c95e437703228cc36a275c81c52a1ca3b3a
- MD5 88bb7fac71f2aa6fdfcf01f7a551b687
- SHA1 40f63f72eb273475e4624cfb5e7fd4d30f3e088b
- SHA512 7364bafa4ee5c81ee55ef83a3a0d871fba0606dd1ec57544acba2c891a4e2b50e30e2e7a1aad6c4b3de449079d2ad29bf67fd8b259ed8348195d85e6f5cb2cb5
- SSDEEP 24576:XRaGKTskVbqPOBYGb8aTt3A6nzSpWdrvE6Ehg7mM+M6RkMkIM7gE6Eh67l:B2tVEI86A6hF0g7mM+M6RkMkIM7I067l
- TLSH T1D5759E02E3D440B9E0B6917489A79625D777BC1507348BCF2398A66F2F332D1AD39F26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_88bb7fac71f2aa6fdfcf01f7a551b687_cobalt-strike_elex_hijackloader_icedid_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_88bb7fac71f2aa6fdfcf01f7a551b687_cobalt-strike_elex_hijackloader_icedid_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_88bb7fac71f2aa6fdfcf01f7a551b687_cobalt-strike_elex_hijackloader_icedid_njrat_stealc_vidar
- Size 1.5MB
- SHA256 608e6ad64ccc7a02f97f39104e890c95e437703228cc36a275c81c52a1ca3b3a
- MD5 88bb7fac71f2aa6fdfcf01f7a551b687
- SHA1 40f63f72eb273475e4624cfb5e7fd4d30f3e088b
- SHA512 7364bafa4ee5c81ee55ef83a3a0d871fba0606dd1ec57544acba2c891a4e2b50e30e2e7a1aad6c4b3de449079d2ad29bf67fd8b259ed8348195d85e6f5cb2cb5
- SSDEEP 24576:XRaGKTskVbqPOBYGb8aTt3A6nzSpWdrvE6Ehg7mM+M6RkMkIM7gE6Eh67l:B2tVEI86A6hF0g7mM+M6RkMkIM7I067l
- TLSH T1D5759E02E3D440B9E0B6917489A79625D777BC1507348BCF2398A66F2F332D1AD39F26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory