General
- Target 2026-08-01_aec5a8aa4c8a74c43ccd16a412f0ce7e_cobalt-strike_elex_icedid_njrat_vidar
- Size 172KB
- Sample260801-th64rsdb76
- SHA256 0ffaf04edfe083e9eb88745b8a6facccd8d6a66e594113cdfb9b21738b0bbde8
- MD5 aec5a8aa4c8a74c43ccd16a412f0ce7e
- SHA1 542ce92a090f5aa2453d3a3226cf79350c35576f
- SHA512 08419300eb3f7deb7053d3b78d5d77be60903f9892074cbb3a85fa53d643470baafdb56def0198ecb779b147508dd3435dda271f680e07537e4197375389aff5
- SSDEEP 3072:2z+DePj3CIUdoj1p/filrEjHODVbpEqyLB/0ooJavy7l/oaHbE:5D3IUdSp/3uDVVU0TavyaaH4
- TLSH T165049E57B39534F9E27283388D611682A771783207E19BEF039446766F232D1AE3AF71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_aec5a8aa4c8a74c43ccd16a412f0ce7e_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_aec5a8aa4c8a74c43ccd16a412f0ce7e_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_aec5a8aa4c8a74c43ccd16a412f0ce7e_cobalt-strike_elex_icedid_njrat_vidar
- Size 172KB
- SHA256 0ffaf04edfe083e9eb88745b8a6facccd8d6a66e594113cdfb9b21738b0bbde8
- MD5 aec5a8aa4c8a74c43ccd16a412f0ce7e
- SHA1 542ce92a090f5aa2453d3a3226cf79350c35576f
- SHA512 08419300eb3f7deb7053d3b78d5d77be60903f9892074cbb3a85fa53d643470baafdb56def0198ecb779b147508dd3435dda271f680e07537e4197375389aff5
- SSDEEP 3072:2z+DePj3CIUdoj1p/filrEjHODVbpEqyLB/0ooJavy7l/oaHbE:5D3IUdSp/3uDVVU0TavyaaH4
- TLSH T165049E57B39534F9E27283388D611682A771783207E19BEF039446766F232D1AE3AF71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory