General
- Target 2026-08-08_6ef9f326b376403978edddf549496526_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar
- Size 2.1MB
- Sample260808-hagncscc22
- SHA256 3a539f1738582318f40b3bd0c3a487c0b94476c3cce7d21cc3758c0d2e19cb24
- MD5 6ef9f326b376403978edddf549496526
- SHA1 b4fb44a4461b2ab8eecf1dca8df2479f2ce57c58
- SHA512 bda18806054264c7eb81be3e56431dbf0c19bdb14c24085f85a67d577cdbd94e02a687ced39f2860c7b52c92192c3f0645854a1538bfc8e88d95c3ec8c94d98f
- SSDEEP 24576:J7VKG/tF5T+0jM6UJfz1ET+/pFCkAAYWDhjKeGBXsO1YA+wI4QBXPoKff21ci/oO:66F0eMpAAYEhpphw5QB33Eot8/Esoe
- TLSH T103A51876B687D4F4D81A50B0CF079FF695606D3DC0E18B5B96C8FE21BF3255138AA20A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_6ef9f326b376403978edddf549496526_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_6ef9f326b376403978edddf549496526_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar
- Size 2.1MB
- SHA256 3a539f1738582318f40b3bd0c3a487c0b94476c3cce7d21cc3758c0d2e19cb24
- MD5 6ef9f326b376403978edddf549496526
- SHA1 b4fb44a4461b2ab8eecf1dca8df2479f2ce57c58
- SHA512 bda18806054264c7eb81be3e56431dbf0c19bdb14c24085f85a67d577cdbd94e02a687ced39f2860c7b52c92192c3f0645854a1538bfc8e88d95c3ec8c94d98f
- SSDEEP 24576:J7VKG/tF5T+0jM6UJfz1ET+/pFCkAAYWDhjKeGBXsO1YA+wI4QBXPoKff21ci/oO:66F0eMpAAYEhpphw5QB33Eot8/Esoe
- TLSH T103A51876B687D4F4D81A50B0CF079FF695606D3DC0E18B5B96C8FE21BF3255138AA20A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE