General
- Target 2026-07-23_ea0306b6376c6d5b360f785c026b35fc_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn
- Size 650KB
- Sample260723-msc54swcnb
- SHA256 fefd5e0ac0d8cc7ffd485b8d225ce6e8c4aa27d7675e8a8fc821e24a3c828760
- MD5 ea0306b6376c6d5b360f785c026b35fc
- SHA1 5f2716d12afc4b93b51ceb543fab843719a00985
- SHA512 b16c53666b89d93aeb9f43ccafc2ac4a2099799893b7f1007e673d62b4e51a56af712e896ffa3197a2e44d595258d3d6631470ea05e5285fe5663b100f85c9f4
- SSDEEP 12288:cFUNDaFvAkkJwfj5S2hO1ALIPMaeCR0e6bmk:cFOa5AkkGA2U1ALcetxmk
- TLSH T158E48F5667F405B9E1F786B48C658106FA337C160B74EF8F03909AA91F33A91ADB9313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_ea0306b6376c6d5b360f785c026b35fc_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_ea0306b6376c6d5b360f785c026b35fc_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_ea0306b6376c6d5b360f785c026b35fc_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn
- Size 650KB
- SHA256 fefd5e0ac0d8cc7ffd485b8d225ce6e8c4aa27d7675e8a8fc821e24a3c828760
- MD5 ea0306b6376c6d5b360f785c026b35fc
- SHA1 5f2716d12afc4b93b51ceb543fab843719a00985
- SHA512 b16c53666b89d93aeb9f43ccafc2ac4a2099799893b7f1007e673d62b4e51a56af712e896ffa3197a2e44d595258d3d6631470ea05e5285fe5663b100f85c9f4
- SSDEEP 12288:cFUNDaFvAkkJwfj5S2hO1ALIPMaeCR0e6bmk:cFOa5AkkGA2U1ALcetxmk
- TLSH T158E48F5667F405B9E1F786B48C658106FA337C160B74EF8F03909AA91F33A91ADB9313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory