General
- Target 2026-07-23_9ac96333c10b21659ef551daa9b01f14_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn
- Size 489KB
- Sample260723-bkb3astyav
- SHA256 4f43e7054ec837c19815c7cd8d262202ca08fd8b82738b4fd97eabead5bf5cee
- MD5 9ac96333c10b21659ef551daa9b01f14
- SHA1 242fddf3f7790503b0437d13925a74feacee57f0
- SHA512 9cc1a52a2f9a84daadc680ef5347e6f4a76fc46de8f61aa902e0498847d0b3843639d7cc58beb4ba1a8af5bd30c7d48751b2d81af397320deafedef7f15de31e
- SSDEEP 6144:XsLqdufVUNDaUas8uii62PmISc1tdw+IlqllW/gZo6FCjO0fgJ2:cFUNDaUH8K623SmtWhF4Y
- TLSH T14EB47D126BD008B9FAB386B55C76D659FA323D210F70EE4F13A092591E33782BA74717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_9ac96333c10b21659ef551daa9b01f14_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_9ac96333c10b21659ef551daa9b01f14_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_9ac96333c10b21659ef551daa9b01f14_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn
- Size 489KB
- SHA256 4f43e7054ec837c19815c7cd8d262202ca08fd8b82738b4fd97eabead5bf5cee
- MD5 9ac96333c10b21659ef551daa9b01f14
- SHA1 242fddf3f7790503b0437d13925a74feacee57f0
- SHA512 9cc1a52a2f9a84daadc680ef5347e6f4a76fc46de8f61aa902e0498847d0b3843639d7cc58beb4ba1a8af5bd30c7d48751b2d81af397320deafedef7f15de31e
- SSDEEP 6144:XsLqdufVUNDaUas8uii62PmISc1tdw+IlqllW/gZo6FCjO0fgJ2:cFUNDaUH8K623SmtWhF4Y
- TLSH T14EB47D126BD008B9FAB386B55C76D659FA323D210F70EE4F13A092591E33782BA74717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory