General
- Target 2026-08-09_f34b40dbdbdb05c0426bde0459251e92_cobalt-strike_elex_icedid_njrat_swisyn_vidar
- Size 293KB
- Sample260809-cfc98sgc96
- SHA256 fb5aab51b41cbf6aea582f375a26ef7735a2c6f0fdaa86b79e61afc1f9c12bd7
- MD5 f34b40dbdbdb05c0426bde0459251e92
- SHA1 adda5bb1e558647dbe027d99e5a231737a915053
- SHA512 297fbbd5fe228f7c2a0b7f9ace5a6356fc9754c15966a8432387a30260878211393c327cc2405e08d86c21f19d8cafde31a3cf544fd195941c4489200a4fff6e
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalum3rTYT6Xyfd+ux9IfBqsmx/LpHQvLq/Zr9CSBQ:UsLqdufVUNDaVYT6E0cmYsmr4mXCD
- TLSH T134547D137A5070EAD12285F11861DA79BB227E311B90AF1B22D5EF173E326437EB6317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_f34b40dbdbdb05c0426bde0459251e92_cobalt-strike_elex_icedid_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_f34b40dbdbdb05c0426bde0459251e92_cobalt-strike_elex_icedid_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_f34b40dbdbdb05c0426bde0459251e92_cobalt-strike_elex_icedid_njrat_swisyn_vidar
- Size 293KB
- SHA256 fb5aab51b41cbf6aea582f375a26ef7735a2c6f0fdaa86b79e61afc1f9c12bd7
- MD5 f34b40dbdbdb05c0426bde0459251e92
- SHA1 adda5bb1e558647dbe027d99e5a231737a915053
- SHA512 297fbbd5fe228f7c2a0b7f9ace5a6356fc9754c15966a8432387a30260878211393c327cc2405e08d86c21f19d8cafde31a3cf544fd195941c4489200a4fff6e
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalum3rTYT6Xyfd+ux9IfBqsmx/LpHQvLq/Zr9CSBQ:UsLqdufVUNDaVYT6E0cmYsmr4mXCD
- TLSH T134547D137A5070EAD12285F11861DA79BB227E311B90AF1B22D5EF173E326437EB6317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory