General
- Target 2026-07-23_d3a7b9709a8f9da1c3e3565fd9544c71_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn
- Size 929KB
- Sample260723-be5sesee98
- SHA256 0be245cb9872a027707e97f9f8099dc71b2606b3939a6ff83a3c3ffdb4bd3fcc
- MD5 d3a7b9709a8f9da1c3e3565fd9544c71
- SHA1 81dcd6193434d4a10c17b2e06807a91467ac97aa
- SHA512 ac1420313ca571b0a9506e320e1550330585a12c0f60b83bccfce314241442b2750cea21bb136b3eb49d6178aa6780eefd2abf084160f48abb778af85bf254d2
- SSDEEP 12288:cFUNDacEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEA:cFOaYy6Xo8XSnqcEz5saq1dZdt
- TLSH T14B157D216BB403A4F1BAC6708D264917F9317C571B75AD8F03A09AAD1F33E99ED38712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_d3a7b9709a8f9da1c3e3565fd9544c71_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_d3a7b9709a8f9da1c3e3565fd9544c71_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_d3a7b9709a8f9da1c3e3565fd9544c71_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn
- Size 929KB
- SHA256 0be245cb9872a027707e97f9f8099dc71b2606b3939a6ff83a3c3ffdb4bd3fcc
- MD5 d3a7b9709a8f9da1c3e3565fd9544c71
- SHA1 81dcd6193434d4a10c17b2e06807a91467ac97aa
- SHA512 ac1420313ca571b0a9506e320e1550330585a12c0f60b83bccfce314241442b2750cea21bb136b3eb49d6178aa6780eefd2abf084160f48abb778af85bf254d2
- SSDEEP 12288:cFUNDacEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEA:cFOaYy6Xo8XSnqcEz5saq1dZdt
- TLSH T14B157D216BB403A4F1BAC6708D264917F9317C571B75AD8F03A09AAD1F33E99ED38712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2