General
- Target 2026-07-23_c8b44961ff7f325e732ff822affe5d98_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 417KB
- Sample260723-bfyeqstxct
- SHA256 9d75e693be58af9e446832cab1a7ad214ce13b62a4cf3e5df3f1fa0beb12b492
- MD5 c8b44961ff7f325e732ff822affe5d98
- SHA1 c00f05fea61ff104069d413f6e9b0e2941f53195
- SHA512 5ab907b0b4adc203cf456a74ec759932c54ec9d20bb36e3beac2e74f4329566577cc2647f2801302287bf757c30962895724c8e8407f6e8e502a0264d351e9df
- SSDEEP 6144:XsLqdufVUNDan0KSK5nJaoeoR1tVpFZ1ADrcHpYbWMMYe82hJohOHEeFr:cFUNDa0K9nLeoR1tVpT1mAHpYbuJooH7
- TLSH T175947C16B79108FAE57386B88C71855AFA323C110BB4DD6F1390A71D1E73682BAF5327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_c8b44961ff7f325e732ff822affe5d98_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_c8b44961ff7f325e732ff822affe5d98_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_c8b44961ff7f325e732ff822affe5d98_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 417KB
- SHA256 9d75e693be58af9e446832cab1a7ad214ce13b62a4cf3e5df3f1fa0beb12b492
- MD5 c8b44961ff7f325e732ff822affe5d98
- SHA1 c00f05fea61ff104069d413f6e9b0e2941f53195
- SHA512 5ab907b0b4adc203cf456a74ec759932c54ec9d20bb36e3beac2e74f4329566577cc2647f2801302287bf757c30962895724c8e8407f6e8e502a0264d351e9df
- SSDEEP 6144:XsLqdufVUNDan0KSK5nJaoeoR1tVpFZ1ADrcHpYbWMMYe82hJohOHEeFr:cFUNDa0K9nLeoR1tVpT1mAHpYbuJooH7
- TLSH T175947C16B79108FAE57386B88C71855AFA323C110BB4DD6F1390A71D1E73682BAF5327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory