General
- Target 2026-08-08_a35a4bfbf2ad718edd0a747e62806aeb_cobalt-strike_elex_hijackloader_icedid_vidar
- Size 45.5MB
- Sample260808-dhe3aayera
- SHA256 1149f23a081dbb9f0a86d3b284f4eaab98b1cb745fbd6c35c0a048a1be9197e3
- MD5 a35a4bfbf2ad718edd0a747e62806aeb
- SHA1 48d25f07c996bd957aa8f30ea65f76f15357c1c7
- SHA512 e0783bf494433642869afb67a541cd144aff138fd994affe16d12946de1f5c0c5ae81970b458ae6a33a6c1e14c39b854dc782e267af49eaa03cae47d7ad23b9e
- SSDEEP 786432:Jymbqv8l2r2H2cSDXQLcd2BWuFBKLAyomzeXqhb/UYE6uk5jzZ1spR2qsPHeuDDd:0Q72CWcxLcdaDy7zlhDUmOR/EHzwSMwh
- TLSH T18DA7332EF2B600DDD1636078882AA229F3357DC66B94C4CB9A4E8D067F632E0DD77355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_a35a4bfbf2ad718edd0a747e62806aeb_cobalt-strike_elex_hijackloader_icedid_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_a35a4bfbf2ad718edd0a747e62806aeb_cobalt-strike_elex_hijackloader_icedid_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_a35a4bfbf2ad718edd0a747e62806aeb_cobalt-strike_elex_hijackloader_icedid_vidar
- Size 45.5MB
- SHA256 1149f23a081dbb9f0a86d3b284f4eaab98b1cb745fbd6c35c0a048a1be9197e3
- MD5 a35a4bfbf2ad718edd0a747e62806aeb
- SHA1 48d25f07c996bd957aa8f30ea65f76f15357c1c7
- SHA512 e0783bf494433642869afb67a541cd144aff138fd994affe16d12946de1f5c0c5ae81970b458ae6a33a6c1e14c39b854dc782e267af49eaa03cae47d7ad23b9e
- SSDEEP 786432:Jymbqv8l2r2H2cSDXQLcd2BWuFBKLAyomzeXqhb/UYE6uk5jzZ1spR2qsPHeuDDd:0Q72CWcxLcdaDy7zlhDUmOR/EHzwSMwh
- TLSH T18DA7332EF2B600DDD1636078882AA229F3357DC66B94C4CB9A4E8D067F632E0DD77355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.