General
- Target 2026-08-03_97bb0c9f486a451ee87d2d22a1060498_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 8.6MB
- Sample260803-fjffjsck4y
- SHA256 9b46bf58db0b5d394ac9b27425e56c6c0c151359d4f7d1bc9287aee9b24c4f8a
- MD5 97bb0c9f486a451ee87d2d22a1060498
- SHA1 0cdb3b69fa1a007a2fc94ac920a13a10d1667c04
- SHA512 9a5ee03b6bceb0078a761b7b35936b8ceea953eb19aac2792df4bfeaf6cd1f5921a46c959cb1e28098a23d4dd293a9f58d42283e4de0fdf1e6b436a68fa58c45
- SSDEEP 98304:HLapINLapIy0oAaldmdmnpN0oAaldmdmnp:HcINcI3Kmd0QKmd0
- TLSH T15D963923B1A2049AE289D035CF06973197A17C6D8FF192FB754076D92B73AD03B3971A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_97bb0c9f486a451ee87d2d22a1060498_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_97bb0c9f486a451ee87d2d22a1060498_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_97bb0c9f486a451ee87d2d22a1060498_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 8.6MB
- SHA256 9b46bf58db0b5d394ac9b27425e56c6c0c151359d4f7d1bc9287aee9b24c4f8a
- MD5 97bb0c9f486a451ee87d2d22a1060498
- SHA1 0cdb3b69fa1a007a2fc94ac920a13a10d1667c04
- SHA512 9a5ee03b6bceb0078a761b7b35936b8ceea953eb19aac2792df4bfeaf6cd1f5921a46c959cb1e28098a23d4dd293a9f58d42283e4de0fdf1e6b436a68fa58c45
- SSDEEP 98304:HLapINLapIy0oAaldmdmnpN0oAaldmdmnp:HcINcI3Kmd0QKmd0
- TLSH T15D963923B1A2049AE289D035CF06973197A17C6D8FF192FB754076D92B73AD03B3971A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1