General
- Target 2026-08-04_8c0e3a1040be1eb8424e30a8d33c4885_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 1.9MB
- Sample260804-g5f5msshmg
- SHA256 8dc002efef1f676c5c7335397763da83df1a50d33cd0bd071979879fc18d71aa
- MD5 8c0e3a1040be1eb8424e30a8d33c4885
- SHA1 eb0c2b67555e151c7612ac7c3c3b965f62de81e3
- SHA512 6ad720dde8741ee1abe3401a410bf5f1cea869b2796b7fd098d1dfd9a27b695d34f358896dd8e08cac74b3ccb9b2648179c4f47c4318e64967e851295a8e7289
- SSDEEP 24576:YNP2k9EqgjI45bl9Mbonwap41+zzPTThwv3EJD:YNPFqqgjI45TMwwapIgTT
- TLSH T19395E52271E204A9C68E9076DF56973593D13C7D8FF283F7B14572C92B729D03A3A60A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-04_8c0e3a1040be1eb8424e30a8d33c4885_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_8c0e3a1040be1eb8424e30a8d33c4885_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_8c0e3a1040be1eb8424e30a8d33c4885_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 1.9MB
- SHA256 8dc002efef1f676c5c7335397763da83df1a50d33cd0bd071979879fc18d71aa
- MD5 8c0e3a1040be1eb8424e30a8d33c4885
- SHA1 eb0c2b67555e151c7612ac7c3c3b965f62de81e3
- SHA512 6ad720dde8741ee1abe3401a410bf5f1cea869b2796b7fd098d1dfd9a27b695d34f358896dd8e08cac74b3ccb9b2648179c4f47c4318e64967e851295a8e7289
- SSDEEP 24576:YNP2k9EqgjI45bl9Mbonwap41+zzPTThwv3EJD:YNPFqqgjI45TMwwapIgTT
- TLSH T19395E52271E204A9C68E9076DF56973593D13C7D8FF283F7B14572C92B729D03A3A60A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory