General
- Target 2026-08-03_31d93224b1679d5dc76eab6b3722f197_cobalt-strike_elex_icedid_njrat_sality_vidar
- Size 367KB
- Sample260804-dlmxas1cjh
- SHA256 5fe879075d2a3993ba2d239e1876c7bdb528734883ca4bd61002190f9ba629e9
- MD5 31d93224b1679d5dc76eab6b3722f197
- SHA1 5b4003c8d82a319f3c26fc19e68cb47ffc924999
- SHA512 d578e6389b81585ba5f1b1c3d3049ea7f1dbf194708c0c2c4ac43eded308cea90aee5ffa9cb81868c5f0401fa126dbed72c490a555e6a8e772d1d500d5e25054
- SSDEEP 3072:0p34HAxxiNSAizQDePj3CIUAfoj1p/filrEjHODVbpEqyLB/0ooJavDtKDYRf:s3FxsSALD3IUYSp/3uDVVU0TavDNf
- TLSH T11684AE2773D134FAD06246349D2012C1F7B5B53117A45B9FAB9446662E2B2C1EE3FF22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_31d93224b1679d5dc76eab6b3722f197_cobalt-strike_elex_icedid_njrat_sality_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_31d93224b1679d5dc76eab6b3722f197_cobalt-strike_elex_icedid_njrat_sality_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_31d93224b1679d5dc76eab6b3722f197_cobalt-strike_elex_icedid_njrat_sality_vidar
- Size 367KB
- SHA256 5fe879075d2a3993ba2d239e1876c7bdb528734883ca4bd61002190f9ba629e9
- MD5 31d93224b1679d5dc76eab6b3722f197
- SHA1 5b4003c8d82a319f3c26fc19e68cb47ffc924999
- SHA512 d578e6389b81585ba5f1b1c3d3049ea7f1dbf194708c0c2c4ac43eded308cea90aee5ffa9cb81868c5f0401fa126dbed72c490a555e6a8e772d1d500d5e25054
- SSDEEP 3072:0p34HAxxiNSAizQDePj3CIUAfoj1p/filrEjHODVbpEqyLB/0ooJavDtKDYRf:s3FxsSALD3IUYSp/3uDVVU0TavDNf
- TLSH T11684AE2773D134FAD06246349D2012C1F7B5B53117A45B9FAB9446662E2B2C1EE3FF22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Drops file in System32 directory