General
- Target 2026-07-23_4efb9ff6258c83f6236a48b4ddd70405_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 395KB
- Sample260723-bpw82ack4v
- SHA256 7de9fd326d8081446cd094bb36c8aa5f4608c4137bf5a2ce5e1950570bd8bad7
- MD5 4efb9ff6258c83f6236a48b4ddd70405
- SHA1 48738226418b0f2d5ab97ed99c36bd1bfbea7d6a
- SHA512 58bace87801f1045cebe68b809bf079d2f2cbc71c0469a0f9f5544caf3ebba62ed653df979345cbc8121994db91f8a51e58fa6baa833bf1f6e6e8700e390be8a
- SSDEEP 6144:XsLqdufVUNDanHRJu41FlWBdI9kIlN7RdMgBPlCuyFz2:cFUNDaHRo41rWDIvlN9lPlC5z2
- TLSH T1C8846C1677900CB9E8B386B54CA59619FE327C1217B1DE4F23615A091F33242BEFA727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_4efb9ff6258c83f6236a48b4ddd70405_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_4efb9ff6258c83f6236a48b4ddd70405_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_4efb9ff6258c83f6236a48b4ddd70405_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 395KB
- SHA256 7de9fd326d8081446cd094bb36c8aa5f4608c4137bf5a2ce5e1950570bd8bad7
- MD5 4efb9ff6258c83f6236a48b4ddd70405
- SHA1 48738226418b0f2d5ab97ed99c36bd1bfbea7d6a
- SHA512 58bace87801f1045cebe68b809bf079d2f2cbc71c0469a0f9f5544caf3ebba62ed653df979345cbc8121994db91f8a51e58fa6baa833bf1f6e6e8700e390be8a
- SSDEEP 6144:XsLqdufVUNDanHRJu41FlWBdI9kIlN7RdMgBPlCuyFz2:cFUNDaHRo41rWDIvlN9lPlC5z2
- TLSH T1C8846C1677900CB9E8B386B54CA59619FE327C1217B1DE4F23615A091F33242BEFA727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory