General
- Target 2026-08-06_a0c6e74b92a1218bcab7066cb8a5e95c_cobalt-strike_elex_icedid_njrat_vidar
- Size 883KB
- Sample260806-bp71jawsbt
- SHA256 57089f8de7070c0622660a7404c1f725e684ab31970ebf0ba2dae3dabbdaabc4
- MD5 a0c6e74b92a1218bcab7066cb8a5e95c
- SHA1 66054057ab2a5b46dae2c06e6ae097c952701d6c
- SHA512 c133ebfd8d4e41cd7cd6976729c06d00058be80314bf1b324dd8188fa6d09a4bf6615e1291247be91ec0670751347a41d970106262f45ce8f5b4825c68ff18da
- SSDEEP 24576:lkzmptLoxtBPgAtQf2KTKK4KKDyK5FZ1EEEEmEEE1EEEEEEEEEEElKK1KKK1KKKU:2E8hIgzKTKK4KKDyK5FZ1EEEEmEEE1EC
- TLSH T12415492A2595D1E4F7E6B2748A06A5F0D7767C261B31E2EF02B071660F335D3CE36A21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_a0c6e74b92a1218bcab7066cb8a5e95c_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_a0c6e74b92a1218bcab7066cb8a5e95c_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_a0c6e74b92a1218bcab7066cb8a5e95c_cobalt-strike_elex_icedid_njrat_vidar
- Size 883KB
- SHA256 57089f8de7070c0622660a7404c1f725e684ab31970ebf0ba2dae3dabbdaabc4
- MD5 a0c6e74b92a1218bcab7066cb8a5e95c
- SHA1 66054057ab2a5b46dae2c06e6ae097c952701d6c
- SHA512 c133ebfd8d4e41cd7cd6976729c06d00058be80314bf1b324dd8188fa6d09a4bf6615e1291247be91ec0670751347a41d970106262f45ce8f5b4825c68ff18da
- SSDEEP 24576:lkzmptLoxtBPgAtQf2KTKK4KKDyK5FZ1EEEEmEEE1EEEEEEEEEEElKK1KKK1KKKU:2E8hIgzKTKK4KKDyK5FZ1EEEEmEEE1EC
- TLSH T12415492A2595D1E4F7E6B2748A06A5F0D7767C261B31E2EF02B071660F335D3CE36A21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.