General
- Target 2026-07-23_e4f23c924c3ffa2fc087a163b66931b6_cobalt-strike_elex_icedid_njrat_swisyn_vidar
- Size 679KB
- Sample260723-beg2csee84
- SHA256 760a960b8f8ff048f3c157110ecb4afca50a38b662ea7dd45ca0bf1b2726a351
- MD5 e4f23c924c3ffa2fc087a163b66931b6
- SHA1 8302a11a4850a5f8289a9c73391ae701d7a11e5f
- SHA512 12ae1ccaa22fc55c178fe161b0e055c63b1d8fe1828e5ddd84cfdc1c779967416eb884faba7f8437b2930515ea1c071edc536f0cc84182eb598302714cc4d307
- SSDEEP 12288:cFUNDa57m7dO/IGuVqpvshi9HDq/KmlScuA5f:cFOaxm7dOXpkqHDqSmlScuA5f
- TLSH T17AE48D47779403B9E577C274C9268B45FA727C160B34EA0F03B453AA1F237926DBA326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_e4f23c924c3ffa2fc087a163b66931b6_cobalt-strike_elex_icedid_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_e4f23c924c3ffa2fc087a163b66931b6_cobalt-strike_elex_icedid_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_e4f23c924c3ffa2fc087a163b66931b6_cobalt-strike_elex_icedid_njrat_swisyn_vidar
- Size 679KB
- SHA256 760a960b8f8ff048f3c157110ecb4afca50a38b662ea7dd45ca0bf1b2726a351
- MD5 e4f23c924c3ffa2fc087a163b66931b6
- SHA1 8302a11a4850a5f8289a9c73391ae701d7a11e5f
- SHA512 12ae1ccaa22fc55c178fe161b0e055c63b1d8fe1828e5ddd84cfdc1c779967416eb884faba7f8437b2930515ea1c071edc536f0cc84182eb598302714cc4d307
- SSDEEP 12288:cFUNDa57m7dO/IGuVqpvshi9HDq/KmlScuA5f:cFOaxm7dOXpkqHDqSmlScuA5f
- TLSH T17AE48D47779403B9E577C274C9268B45FA727C160B34EA0F03B453AA1F237926DBA326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory