General
- Target 2026-08-08_415a4daa2cdd9e99eddf14f791361a7c_cobalt-strike_elex_icedid_njrat_vidar
- Size 341KB
- Sample260808-xmszgsfb52
- SHA256 1bcfd31a538e425a1f46f1240660af0d0b4ff2fbfec46c37cf1e038c30ede406
- MD5 415a4daa2cdd9e99eddf14f791361a7c
- SHA1 9d4af276d79fb4af203c6075e33767b459e939f3
- SHA512 abfb2def55f05b6c50e962a9f63dbe88c6333ce988b66948af4f8a76f6f1cc9dd1d34ffa656466c66ea6d36e417237be09b4f1fda88c9f1469ba6751e7e52d8d
- SSDEEP 6144:+lvjA1GSIml0hPZEncAOEJb/WyIxAwt5pfYNoNoSP:+lvdSb+PZE9O2bJIC0fDNN
- TLSH T12874AF57F26571F6D16A8970C8524A02E772BC361761DB9F73803BB90E326D06E3A723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-08_415a4daa2cdd9e99eddf14f791361a7c_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-08-08_415a4daa2cdd9e99eddf14f791361a7c_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 2026-08-08_415a4daa2cdd9e99eddf14f791361a7c_cobalt-strike_elex_icedid_njrat_vidar
- Size 341KB
- SHA256 1bcfd31a538e425a1f46f1240660af0d0b4ff2fbfec46c37cf1e038c30ede406
- MD5 415a4daa2cdd9e99eddf14f791361a7c
- SHA1 9d4af276d79fb4af203c6075e33767b459e939f3
- SHA512 abfb2def55f05b6c50e962a9f63dbe88c6333ce988b66948af4f8a76f6f1cc9dd1d34ffa656466c66ea6d36e417237be09b4f1fda88c9f1469ba6751e7e52d8d
- SSDEEP 6144:+lvjA1GSIml0hPZEncAOEJb/WyIxAwt5pfYNoNoSP:+lvdSb+PZE9O2bJIC0fDNN
- TLSH T12874AF57F26571F6D16A8970C8524A02E772BC361761DB9F73803BB90E326D06E3A723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1