General
- Target 2026-08-07_b3d6fa86a6d3a9b891f243e2d6ab103d_cobalt-strike_elex_icedid_swisyn_vidar
- Size 773KB
- Sample260807-gh87xayaqa
- SHA256 8e8493503c86f65b8aa748975da6a026a676996848d577a8ff53ace0949f2b62
- MD5 b3d6fa86a6d3a9b891f243e2d6ab103d
- SHA1 21dcd6420ee24a1da4a903a197c84c757e61cabd
- SHA512 0bd3369b40d14d4821e718e952c0b28aff1195a06918a9f2e3dc10357f6501760875e2876e4763e509d4b0b00e5f41f3ff076be6f0f4531edeb9c5652196cbb7
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalvVHRQ/EJhz2WnBUCsyYYDbMrSoH7G2E1w:UsLqdufVUNDaVV8EbaWnBUC5Jw
- TLSH T1CCF48B92671A40AAEC1245F0CC5DC7397E216FE12E90D9FA22D1FFFB39B13427961216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_b3d6fa86a6d3a9b891f243e2d6ab103d_cobalt-strike_elex_icedid_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_b3d6fa86a6d3a9b891f243e2d6ab103d_cobalt-strike_elex_icedid_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_b3d6fa86a6d3a9b891f243e2d6ab103d_cobalt-strike_elex_icedid_swisyn_vidar
- Size 773KB
- SHA256 8e8493503c86f65b8aa748975da6a026a676996848d577a8ff53ace0949f2b62
- MD5 b3d6fa86a6d3a9b891f243e2d6ab103d
- SHA1 21dcd6420ee24a1da4a903a197c84c757e61cabd
- SHA512 0bd3369b40d14d4821e718e952c0b28aff1195a06918a9f2e3dc10357f6501760875e2876e4763e509d4b0b00e5f41f3ff076be6f0f4531edeb9c5652196cbb7
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalvVHRQ/EJhz2WnBUCsyYYDbMrSoH7G2E1w:UsLqdufVUNDaVV8EbaWnBUC5Jw
- TLSH T1CCF48B92671A40AAEC1245F0CC5DC7397E216FE12E90D9FA22D1FFFB39B13427961216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory