General
- Target 2026-08-07_3a993b1f6698c5e3e858e473a2862893_cobalt-strike_elex_icedid_swisyn_vidar
- Size 773KB
- Sample260807-gr8bzagr4t
- SHA256 e55e43dd9af91ab3965f722a2a5a8911270c41978e0082d2ff7da157dcf01abb
- MD5 3a993b1f6698c5e3e858e473a2862893
- SHA1 f5a507595e591ad7a7d49f5033231d72fba44a08
- SHA512 6552cb8bdc56cde5f8d4ffe126ddfa97536fc97ab3f8661fae02b026daccbc1edf121be4becd730eeed98592e2533ad0db61a1af8c4519c2a8b5d37f43dbf151
- SSDEEP 12288:PFUNDamoCCesq8NrK97wdjL/aZqwHW4N3XviNcrLLHHFVfl30:PFOa9Wsq8N7dn/yqOaoLH/B0
- TLSH T120F49E2259921C8BC1A25EB384F1B235F95E8D722F934A4B53627E8DBE36D073D70931
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_3a993b1f6698c5e3e858e473a2862893_cobalt-strike_elex_icedid_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_3a993b1f6698c5e3e858e473a2862893_cobalt-strike_elex_icedid_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_3a993b1f6698c5e3e858e473a2862893_cobalt-strike_elex_icedid_swisyn_vidar
- Size 773KB
- SHA256 e55e43dd9af91ab3965f722a2a5a8911270c41978e0082d2ff7da157dcf01abb
- MD5 3a993b1f6698c5e3e858e473a2862893
- SHA1 f5a507595e591ad7a7d49f5033231d72fba44a08
- SHA512 6552cb8bdc56cde5f8d4ffe126ddfa97536fc97ab3f8661fae02b026daccbc1edf121be4becd730eeed98592e2533ad0db61a1af8c4519c2a8b5d37f43dbf151
- SSDEEP 12288:PFUNDamoCCesq8NrK97wdjL/aZqwHW4N3XviNcrLLHHFVfl30:PFOa9Wsq8N7dn/yqOaoLH/B0
- TLSH T120F49E2259921C8BC1A25EB384F1B235F95E8D722F934A4B53627E8DBE36D073D70931
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory