General
- Target 2026-07-23_be6505804210cdb149e71edb6bc77e44_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 414KB
- Sample260723-bgzdesef39
- SHA256 ce21f6ed55069e05d275744c0b8e80fbbe01048435272ba2451b740524711eb0
- MD5 be6505804210cdb149e71edb6bc77e44
- SHA1 80c8a1ce4e7f2d660035ed9ca5336f1cc1a1a35d
- SHA512 0c39371c6bf695f9e89941d9a79dad193946a4d199a188f35cc1d2ffb00008602da5f5b9f1728c58d338297dfe9ca9702b50f8a1ccdeb56588bb4dcd1b14deba
- SSDEEP 6144:XsLqdufVUNDan3jhyo0yEA3cKHLPOYI/8lHk3Nh5Z65FJraQe:cFUNDaVyFWMoLmYG8lHkSK
- TLSH T1AB946D127BE41CB9E9B39A7448B58519FA327C120B70DD4F1390A31A1E73682BEF5727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_be6505804210cdb149e71edb6bc77e44_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_be6505804210cdb149e71edb6bc77e44_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_be6505804210cdb149e71edb6bc77e44_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 414KB
- SHA256 ce21f6ed55069e05d275744c0b8e80fbbe01048435272ba2451b740524711eb0
- MD5 be6505804210cdb149e71edb6bc77e44
- SHA1 80c8a1ce4e7f2d660035ed9ca5336f1cc1a1a35d
- SHA512 0c39371c6bf695f9e89941d9a79dad193946a4d199a188f35cc1d2ffb00008602da5f5b9f1728c58d338297dfe9ca9702b50f8a1ccdeb56588bb4dcd1b14deba
- SSDEEP 6144:XsLqdufVUNDan3jhyo0yEA3cKHLPOYI/8lHk3Nh5Z65FJraQe:cFUNDaVyFWMoLmYG8lHkSK
- TLSH T1AB946D127BE41CB9E9B39A7448B58519FA327C120B70DD4F1390A31A1E73682BEF5727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory