General
- Target 2026-08-01_e0b3f2ab870dc2089d90f8efaac4a98f_cobalt-strike_elex_icedid_njrat_swisyn_vidar
- Size 272KB
- Sample260801-xswbsseq31
- SHA256 8ac912eb077aa473aa9a21fd91011a910ad45fa6445ad406f119ec66b8a0bc29
- MD5 e0b3f2ab870dc2089d90f8efaac4a98f
- SHA1 67f5b1016614ad1aae545f8397dae6d4cbcb5e4e
- SHA512 a260629fa26ce5c59ad9fef0f2f299d80822e9e0ce6f13e2237b2d95cb6ad92217586453eca9c933372d86a73d2d43fd962de303fa03293182cb28ef0a300fe6
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalvBrLZQUqhg4KJzkvFSva2cCL4c6Vi2dqYIW00a:UsLqdufVUNDaD83y6Ca2bIqYIR0a
- TLSH T1F9546D073A5820E9F62A85B15C619E2DF7317D310BA49F4B23E1A7012E7228B7DF571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_e0b3f2ab870dc2089d90f8efaac4a98f_cobalt-strike_elex_icedid_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_e0b3f2ab870dc2089d90f8efaac4a98f_cobalt-strike_elex_icedid_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_e0b3f2ab870dc2089d90f8efaac4a98f_cobalt-strike_elex_icedid_njrat_swisyn_vidar
- Size 272KB
- SHA256 8ac912eb077aa473aa9a21fd91011a910ad45fa6445ad406f119ec66b8a0bc29
- MD5 e0b3f2ab870dc2089d90f8efaac4a98f
- SHA1 67f5b1016614ad1aae545f8397dae6d4cbcb5e4e
- SHA512 a260629fa26ce5c59ad9fef0f2f299d80822e9e0ce6f13e2237b2d95cb6ad92217586453eca9c933372d86a73d2d43fd962de303fa03293182cb28ef0a300fe6
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalvBrLZQUqhg4KJzkvFSva2cCL4c6Vi2dqYIW00a:UsLqdufVUNDaD83y6Ca2bIqYIR0a
- TLSH T1F9546D073A5820E9F62A85B15C619E2DF7317D310BA49F4B23E1A7012E7228B7DF571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory