General
- Target 2026-08-08_ebf8e729a78213b117c9544d9e416e34_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar
- Size 2.7MB
- Sample260808-g4dccsvxex
- SHA256 95cd9e5b65abf63b0b67ab13c62575de658b496cfc412f98e832f685b3d821a1
- MD5 ebf8e729a78213b117c9544d9e416e34
- SHA1 00769e0d2ecaa41ecb5e8bdad658efbe3c59a9ea
- SHA512 5bf0692ce39c4d5190851dd2054be5948dc135054febe4887620beb00c1912c6c3126ca5a1a5c6594cd34ad85e2e918922bda49a86b347dbb6f5d7d132e9a518
- SSDEEP 49152:Q6F0eMpAAYEhpqhw63jQ8UCjvGue9wM8klf8:z0nAAYEpqhD3jBWh8
- TLSH T156D58C12E3C582F6E57351B0C457D6BAEA307C1684318A9FB294FE0A3F73A615DB8712
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_ebf8e729a78213b117c9544d9e416e34_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_ebf8e729a78213b117c9544d9e416e34_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar
- Size 2.7MB
- SHA256 95cd9e5b65abf63b0b67ab13c62575de658b496cfc412f98e832f685b3d821a1
- MD5 ebf8e729a78213b117c9544d9e416e34
- SHA1 00769e0d2ecaa41ecb5e8bdad658efbe3c59a9ea
- SHA512 5bf0692ce39c4d5190851dd2054be5948dc135054febe4887620beb00c1912c6c3126ca5a1a5c6594cd34ad85e2e918922bda49a86b347dbb6f5d7d132e9a518
- SSDEEP 49152:Q6F0eMpAAYEhpqhw63jQ8UCjvGue9wM8klf8:z0nAAYEpqhD3jBWh8
- TLSH T156D58C12E3C582F6E57351B0C457D6BAEA307C1684318A9FB294FE0A3F73A615DB8712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE