General
- Target 2026-07-23_b1c424939c771f04ab07555f7187b3d9_cobalt-strike_elex_icedid_njrat_swisyn_vidar
- Size 601KB
- Sample260723-mx3lkaca42
- SHA256 b55f14261742b08711224c85c3a6a8a88c3ec7d3851f4a1bd885c161a8a883d8
- MD5 b1c424939c771f04ab07555f7187b3d9
- SHA1 1c7723f7a09816c6df8aa5a688bfd0cff2da89c1
- SHA512 f8b2c8bfceee9245d333b8039a02030bbe6a9da2f6e49161b6e9348793115388b97260fd20c4b315b84d4ab50e2e04d9829b947e6f3e27a971ff1d609151d83b
- SSDEEP 6144:XsLqdufVUNDan3MBGPbvWnAbqeVx/8Lr/pG23gPVWT1rBezZCqRp2:cFUNDa3MBwbvWntekXxD3yk1HqRp2
- TLSH T19FD46B57779009BAE477C178C8668A15FA727C250B30DB4F03A8937A1F3335279BA726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_b1c424939c771f04ab07555f7187b3d9_cobalt-strike_elex_icedid_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_b1c424939c771f04ab07555f7187b3d9_cobalt-strike_elex_icedid_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_b1c424939c771f04ab07555f7187b3d9_cobalt-strike_elex_icedid_njrat_swisyn_vidar
- Size 601KB
- SHA256 b55f14261742b08711224c85c3a6a8a88c3ec7d3851f4a1bd885c161a8a883d8
- MD5 b1c424939c771f04ab07555f7187b3d9
- SHA1 1c7723f7a09816c6df8aa5a688bfd0cff2da89c1
- SHA512 f8b2c8bfceee9245d333b8039a02030bbe6a9da2f6e49161b6e9348793115388b97260fd20c4b315b84d4ab50e2e04d9829b947e6f3e27a971ff1d609151d83b
- SSDEEP 6144:XsLqdufVUNDan3MBGPbvWnAbqeVx/8Lr/pG23gPVWT1rBezZCqRp2:cFUNDa3MBwbvWntekXxD3yk1HqRp2
- TLSH T19FD46B57779009BAE477C178C8668A15FA727C250B30DB4F03A8937A1F3335279BA726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory