General
- Target 2026-08-07_322b1424f07da3b94484cd5dce2db683_cobalt-strike_coinminer_elex_icedid_njrat
- Size 961KB
- Sample260807-mb8wfsfc52
- SHA256 201bd8461980dbefbbbfd8c9b14ca514f349dc1d859e78983b1ed831824faecb
- MD5 322b1424f07da3b94484cd5dce2db683
- SHA1 6cbb02532526838de834151f544953433168f912
- SHA512 254b51de87a317c8f06570b729f9855756a5a6166bc0542bbdb80c7b7c371cd87d04480a2908cf0fe760e7d6bf997de2b2827d0283852b1a897ef565a899115c
- SSDEEP 12288:86Wq4aaE6KwyF5L0Y2D1PqLb6Wq44er5+nZoyfL1W0mer5+nIwaJVer5+nBoz:6thEVaPqLBt0EE1y
- TLSH T11F255A07B2559CD3CBE54A74DC24C6A55322B89DAFF34673788453CE7C6B284BE26B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-07_322b1424f07da3b94484cd5dce2db683_cobalt-strike_coinminer_elex_icedid_njrat.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_322b1424f07da3b94484cd5dce2db683_cobalt-strike_coinminer_elex_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_322b1424f07da3b94484cd5dce2db683_cobalt-strike_coinminer_elex_icedid_njrat
- Size 961KB
- SHA256 201bd8461980dbefbbbfd8c9b14ca514f349dc1d859e78983b1ed831824faecb
- MD5 322b1424f07da3b94484cd5dce2db683
- SHA1 6cbb02532526838de834151f544953433168f912
- SHA512 254b51de87a317c8f06570b729f9855756a5a6166bc0542bbdb80c7b7c371cd87d04480a2908cf0fe760e7d6bf997de2b2827d0283852b1a897ef565a899115c
- SSDEEP 12288:86Wq4aaE6KwyF5L0Y2D1PqLb6Wq44er5+nZoyfL1W0mer5+nIwaJVer5+nBoz:6thEVaPqLBt0EE1y
- TLSH T11F255A07B2559CD3CBE54A74DC24C6A55322B89DAFF34673788453CE7C6B284BE26B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.