General
- Target 2026-07-23_af98e31a273bec6e4765d4c06e7143ef_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 629KB
- Sample260723-mx4hvsca43
- SHA256 c0a14e3506aebfa2cf007cbd9a226642c44dcb93ba94314060ce5c5d9e63d495
- MD5 af98e31a273bec6e4765d4c06e7143ef
- SHA1 af587b7826f64b2a745ce4abaaa6fc26749e61f2
- SHA512 726477fbf451925388e7bb6d59b74f5593b68ecced8eab3704f1cfc1106dca2ce1297872f786de61804c946a8dd2f7bed474f6c52df22439fb31df2ba4890ec9
- SSDEEP 12288:cFUNDa9wi7LFSXiOahKONoJw676G9vEef:cFOaD7LFSXiOaEqP3G9vTf
- TLSH T15CD48D12B7E504F9E4B756748CB15616FA327C210B70DE5F23A096192F33A81BDBA723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_af98e31a273bec6e4765d4c06e7143ef_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_af98e31a273bec6e4765d4c06e7143ef_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_af98e31a273bec6e4765d4c06e7143ef_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 629KB
- SHA256 c0a14e3506aebfa2cf007cbd9a226642c44dcb93ba94314060ce5c5d9e63d495
- MD5 af98e31a273bec6e4765d4c06e7143ef
- SHA1 af587b7826f64b2a745ce4abaaa6fc26749e61f2
- SHA512 726477fbf451925388e7bb6d59b74f5593b68ecced8eab3704f1cfc1106dca2ce1297872f786de61804c946a8dd2f7bed474f6c52df22439fb31df2ba4890ec9
- SSDEEP 12288:cFUNDa9wi7LFSXiOahKONoJw676G9vEef:cFOaD7LFSXiOaEqP3G9vTf
- TLSH T15CD48D12B7E504F9E4B756748CB15616FA327C210B70DE5F23A096192F33A81BDBA723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory