General
- Target 2026-07-22_8e7fe03b057c00a4231b33c0e193a01b_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 5.3MB
- Sample260722-gfdm8aba68
- SHA256 cc58ac7d61eb64d838863cdb6b087009670de4121b89104d7befb40210385e48
- MD5 8e7fe03b057c00a4231b33c0e193a01b
- SHA1 41d64734563cd33b34616ccfdaef11d9428bb580
- SHA512 3fe58112c739635d208498b0ca5c738545d6c135805204d3babae4af28585df1d5407c08b31dec245eefe286263faa1f1e7c3a67c08f928cfaab87f6a068e08c
- SSDEEP 49152:PabH/PuYScerPrgjI45TMwwapIgTgabH/IuYScerPrgjI45TMwwapIgTjJRJS:gWr9LapIlWr9LapIqJRw
- TLSH T10946092271A20499F559D972CF06A724A7D13C698FF183EFF14972C92B725F03A3970A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_8e7fe03b057c00a4231b33c0e193a01b_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_8e7fe03b057c00a4231b33c0e193a01b_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_8e7fe03b057c00a4231b33c0e193a01b_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 5.3MB
- SHA256 cc58ac7d61eb64d838863cdb6b087009670de4121b89104d7befb40210385e48
- MD5 8e7fe03b057c00a4231b33c0e193a01b
- SHA1 41d64734563cd33b34616ccfdaef11d9428bb580
- SHA512 3fe58112c739635d208498b0ca5c738545d6c135805204d3babae4af28585df1d5407c08b31dec245eefe286263faa1f1e7c3a67c08f928cfaab87f6a068e08c
- SSDEEP 49152:PabH/PuYScerPrgjI45TMwwapIgTgabH/IuYScerPrgjI45TMwwapIgTjJRJS:gWr9LapIlWr9LapIqJRw
- TLSH T10946092271A20499F559D972CF06A724A7D13C698FF183EFF14972C92B725F03A3970A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1