General
- Target 2026-08-01_ec2a0295fe93224d5a63456295983684_cobalt-strike_elex_hijackloader_icedid_njrat_nymaim_rhadamanthys_vidar
- Size 1.3MB
- Sample260801-ppwjdsar4z
- SHA256 0c9f7bafa0d623a3d47b7c4ac6063fcd6446e93eca6b66b11b567ee04480e5f9
- MD5 ec2a0295fe93224d5a63456295983684
- SHA1 af8c91356f1c0a5418d16bd5bb815f61f3378e7f
- SHA512 43c4b6c0db43f50ccce6e0ab36a57f51b6c9c5fefc56bb7b31d53b771d26b6d7f3490ba2bdcb376c98d572035636d53e53d2c1c5c41440b7b8c00728060339e8
- SSDEEP 24576:yLKfhIClwtTuRWFsronbEqa6+GG8yKrO4cr:yuwtTToonbXaIHy5j
- TLSH T14F557C17A79500FCD46AC1748B564532E672BC560B31BAEF0690B3292F7BAE06F3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_ec2a0295fe93224d5a63456295983684_cobalt-strike_elex_hijackloader_icedid_njrat_nymaim_rhadamanthys_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_ec2a0295fe93224d5a63456295983684_cobalt-strike_elex_hijackloader_icedid_njrat_nymaim_rhadamanthys_vidar
- Size 1.3MB
- SHA256 0c9f7bafa0d623a3d47b7c4ac6063fcd6446e93eca6b66b11b567ee04480e5f9
- MD5 ec2a0295fe93224d5a63456295983684
- SHA1 af8c91356f1c0a5418d16bd5bb815f61f3378e7f
- SHA512 43c4b6c0db43f50ccce6e0ab36a57f51b6c9c5fefc56bb7b31d53b771d26b6d7f3490ba2bdcb376c98d572035636d53e53d2c1c5c41440b7b8c00728060339e8
- SSDEEP 24576:yLKfhIClwtTuRWFsronbEqa6+GG8yKrO4cr:yuwtTToonbXaIHy5j
- TLSH T14F557C17A79500FCD46AC1748B564532E672BC560B31BAEF0690B3292F7BAE06F3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory