General
- Target 2026-07-28_13b7f23fd95de19365cb07040cf3f215_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 5.0MB
- Sample260728-tptr1sab79
- SHA256 45a43e53f60c90ef80a20f73286108e6eba32be08296775037ae0a39f1ecb1c4
- MD5 13b7f23fd95de19365cb07040cf3f215
- SHA1 1594b4400bf9fb4f66012bbb5ada1a98edf60a6f
- SHA512 e9ed3dd440c4c6d128240648a34c7bda8549ccaa75535f794872d32817405f3a8b8e6f2cd28ff8cb19f60ead9b62821bb8b209e944761f677ab735f4d3794b5c
- SSDEEP 49152:BmrU3KyUmgjI45TMwwapIgTYTCTlGnPwPszW2Z4eiIijdtpU/eKXMZm3yf2dsrtP:Bu8LapIs2qbGImCf2d2/nbXaPM
- TLSH T19D368D56F2A404EAD06AC075CE558636F7713C490BF056EB2691F7D92F37AE07A3A320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_13b7f23fd95de19365cb07040cf3f215_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_13b7f23fd95de19365cb07040cf3f215_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_13b7f23fd95de19365cb07040cf3f215_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 5.0MB
- SHA256 45a43e53f60c90ef80a20f73286108e6eba32be08296775037ae0a39f1ecb1c4
- MD5 13b7f23fd95de19365cb07040cf3f215
- SHA1 1594b4400bf9fb4f66012bbb5ada1a98edf60a6f
- SHA512 e9ed3dd440c4c6d128240648a34c7bda8549ccaa75535f794872d32817405f3a8b8e6f2cd28ff8cb19f60ead9b62821bb8b209e944761f677ab735f4d3794b5c
- SSDEEP 49152:BmrU3KyUmgjI45TMwwapIgTYTCTlGnPwPszW2Z4eiIijdtpU/eKXMZm3yf2dsrtP:Bu8LapIs2qbGImCf2d2/nbXaPM
- TLSH T19D368D56F2A404EAD06AC075CE558636F7713C490BF056EB2691F7D92F37AE07A3A320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory