General
- Target 2026-08-05_d65b8b22326e2f319fdb9c9c3367a11d_cobalt-strike_coinminer_elex_icedid_njrat_xloader
- Size 711KB
- Sample260805-hjh8jsfb48
- SHA256 b9b3124d31d0ae4eac0a77a8e9c9dd97452431c2f7c7761ef7e95e8d3a4feb9d
- MD5 d65b8b22326e2f319fdb9c9c3367a11d
- SHA1 a92b20e538b8dbae9d7fa8cd5f3e642ea4e49b40
- SHA512 2a34db049f81bfceac311c48b6b506f50445c0bcd78cb44a087fed3fcf8d21202dd64ae56fbb4077aae88158a7ed8fdc519e2d39d2d640afd6e13a239507e7b7
- SSDEEP 12288:56Wq4aaE6KwyF5L0Y2D1PqLb6Wq44er5+nZo6aE6KwyF5L0Y2D1PqLz:PthEVaPqLBt0kEVaPqLz
- TLSH T166F4015E77A9A8D2DC740F30AC714281867178A3AF705A7B24D4630F5C6B1B89E26F38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-05_d65b8b22326e2f319fdb9c9c3367a11d_cobalt-strike_coinminer_elex_icedid_njrat_xloader.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_d65b8b22326e2f319fdb9c9c3367a11d_cobalt-strike_coinminer_elex_icedid_njrat_xloader.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_d65b8b22326e2f319fdb9c9c3367a11d_cobalt-strike_coinminer_elex_icedid_njrat_xloader
- Size 711KB
- SHA256 b9b3124d31d0ae4eac0a77a8e9c9dd97452431c2f7c7761ef7e95e8d3a4feb9d
- MD5 d65b8b22326e2f319fdb9c9c3367a11d
- SHA1 a92b20e538b8dbae9d7fa8cd5f3e642ea4e49b40
- SHA512 2a34db049f81bfceac311c48b6b506f50445c0bcd78cb44a087fed3fcf8d21202dd64ae56fbb4077aae88158a7ed8fdc519e2d39d2d640afd6e13a239507e7b7
- SSDEEP 12288:56Wq4aaE6KwyF5L0Y2D1PqLb6Wq44er5+nZo6aE6KwyF5L0Y2D1PqLz:PthEVaPqLBt0kEVaPqLz
- TLSH T166F4015E77A9A8D2DC740F30AC714281867178A3AF705A7B24D4630F5C6B1B89E26F38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.