General
- Target 2026-08-05_586383dc490e7927200c9b73ca3f0a15_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 2.5MB
- Sample260805-w6e2asyybv
- SHA256 6344c748811eb1fae14f465f3cbd6aea053c184841a51e3a0dae71dd555d1bb6
- MD5 586383dc490e7927200c9b73ca3f0a15
- SHA1 f8ae0d4d0e05f0662bb9abfa82597e915cd41133
- SHA512 9da9fe79658e16282c081e58ea665c32b39df642df08bb072a23e2c4f38e182b38f81fb1d1496203e57661782bace7fbb293835bb470357d8a06cd1a643279e6
- SSDEEP 24576:CFOaGbfbqO4YskoVVtE4i0ZJp0Rsivg+6h55H863IXSHaxO:qigHFVdDZDfivg+6h+SHa0
- TLSH T12AC5C60673F807D9F1F34B7849756A1599B6BCA9DA10C39F15A0710E0E32B988D72B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_586383dc490e7927200c9b73ca3f0a15_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_586383dc490e7927200c9b73ca3f0a15_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_586383dc490e7927200c9b73ca3f0a15_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 2.5MB
- SHA256 6344c748811eb1fae14f465f3cbd6aea053c184841a51e3a0dae71dd555d1bb6
- MD5 586383dc490e7927200c9b73ca3f0a15
- SHA1 f8ae0d4d0e05f0662bb9abfa82597e915cd41133
- SHA512 9da9fe79658e16282c081e58ea665c32b39df642df08bb072a23e2c4f38e182b38f81fb1d1496203e57661782bace7fbb293835bb470357d8a06cd1a643279e6
- SSDEEP 24576:CFOaGbfbqO4YskoVVtE4i0ZJp0Rsivg+6h55H863IXSHaxO:qigHFVdDZDfivg+6h+SHa0
- TLSH T12AC5C60673F807D9F1F34B7849756A1599B6BCA9DA10C39F15A0710E0E32B988D72B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory