General
- Target 2026-07-23_dadabf4418f3430bed6b54c499926659_cobalt-strike_elex_icedid_njrat_swisyn_vidar
- Size 608KB
- Sample260723-mtjdhshm91
- SHA256 326f0f47d2795f1c86c78d8e4540ec53496ca1829e9c91e813d7d5ff4d165d93
- MD5 dadabf4418f3430bed6b54c499926659
- SHA1 d8534f77a6ec733dc2098935fbbd15236be87137
- SHA512 aa5477bbbfd5db1ae5c285646345ad1ac58066a29fe9dc1737a2780ff13dfab69c3c5d436d264be41c02f05329160f89990af48d421093107383f5ff1eabc2b7
- SSDEEP 6144:XsLqdufVUNDa+d9XY0RvE9/rvrHI8Z5FdSB1LEhyOx3rz4o0lxtyfDxERIT:cFUNDa+jY0NE9zTTZ5Euhbx/4o0lTw
- TLSH T1E9D47D17779004B9E077C2B8C9A68A16FA727C150730EB4F13A893791F337526E7A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_dadabf4418f3430bed6b54c499926659_cobalt-strike_elex_icedid_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_dadabf4418f3430bed6b54c499926659_cobalt-strike_elex_icedid_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_dadabf4418f3430bed6b54c499926659_cobalt-strike_elex_icedid_njrat_swisyn_vidar
- Size 608KB
- SHA256 326f0f47d2795f1c86c78d8e4540ec53496ca1829e9c91e813d7d5ff4d165d93
- MD5 dadabf4418f3430bed6b54c499926659
- SHA1 d8534f77a6ec733dc2098935fbbd15236be87137
- SHA512 aa5477bbbfd5db1ae5c285646345ad1ac58066a29fe9dc1737a2780ff13dfab69c3c5d436d264be41c02f05329160f89990af48d421093107383f5ff1eabc2b7
- SSDEEP 6144:XsLqdufVUNDa+d9XY0RvE9/rvrHI8Z5FdSB1LEhyOx3rz4o0lxtyfDxERIT:cFUNDa+jY0NE9zTTZ5Euhbx/4o0lTw
- TLSH T1E9D47D17779004B9E077C2B8C9A68A16FA727C150730EB4F13A893791F337526E7A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory