General
- Target 2026-07-23_673ab26439e689efcb5461f9a92aef64_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 781KB
- Sample260723-bnmcfaeg44
- SHA256 c7ccbbf83dc2158b936e1fc0368b35b1894975471d795f0e0c2467e0367f85ba
- MD5 673ab26439e689efcb5461f9a92aef64
- SHA1 9f6ac62e5957ea3bbe2b7a80f5c9c081621cf5fc
- SHA512 875b5bfb86ef1e0fdc35df2b0bfc0e978e3b044942c6958edc8c922bb6b17d339c879edee44c9117c3fadc303bf65c1f82bfbe56cb64e999a0a3dd31a274a032
- SSDEEP 24576:cFOasFrECLVoQ4eyitAoC/9uwntKUfxw5c2:s8rxLVoQyYUfxw62
- TLSH T1A8058E1676E402B9E077D67488768516FA313C520B34DE9F1390DA6A2F33A93FE78712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_673ab26439e689efcb5461f9a92aef64_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_673ab26439e689efcb5461f9a92aef64_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_673ab26439e689efcb5461f9a92aef64_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 781KB
- SHA256 c7ccbbf83dc2158b936e1fc0368b35b1894975471d795f0e0c2467e0367f85ba
- MD5 673ab26439e689efcb5461f9a92aef64
- SHA1 9f6ac62e5957ea3bbe2b7a80f5c9c081621cf5fc
- SHA512 875b5bfb86ef1e0fdc35df2b0bfc0e978e3b044942c6958edc8c922bb6b17d339c879edee44c9117c3fadc303bf65c1f82bfbe56cb64e999a0a3dd31a274a032
- SSDEEP 24576:cFOasFrECLVoQ4eyitAoC/9uwntKUfxw5c2:s8rxLVoQyYUfxw62
- TLSH T1A8058E1676E402B9E077D67488768516FA313C520B34DE9F1390DA6A2F33A93FE78712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory