General
- Target 2026-08-09_579647ca62f25e926b2d438998ff8c4e_cobalt-strike_elex_icedid_swisyn_vidar
- Size 773KB
- Sample260809-cl9wdsyckf
- SHA256 1f08f46df12cdcadf18f911bf9f06cb5c2299ce3878a203fc867833414241037
- MD5 579647ca62f25e926b2d438998ff8c4e
- SHA1 a4af00ba6a0369d3ebcd9c5206c747e9f3734f66
- SHA512 b507e9470607d4163d3634e319f40df91637d1bee008ac2f753457e6747f95b2abba22eb755d1436caa2f64578be990681adcc40cf4375051677cdf453d39e0b
- SSDEEP 12288:PFUNDafoCCYOVOELbT3th+9GAEuwbpO5B+l5kwYf:PFOaAfOED3theEBO5Ml5Uf
- TLSH T19BF44B4AF7248CAEF6115AB96CE5D07E351C6D312E07CF0B2310B1984F63A6CBD92679
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_579647ca62f25e926b2d438998ff8c4e_cobalt-strike_elex_icedid_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_579647ca62f25e926b2d438998ff8c4e_cobalt-strike_elex_icedid_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_579647ca62f25e926b2d438998ff8c4e_cobalt-strike_elex_icedid_swisyn_vidar
- Size 773KB
- SHA256 1f08f46df12cdcadf18f911bf9f06cb5c2299ce3878a203fc867833414241037
- MD5 579647ca62f25e926b2d438998ff8c4e
- SHA1 a4af00ba6a0369d3ebcd9c5206c747e9f3734f66
- SHA512 b507e9470607d4163d3634e319f40df91637d1bee008ac2f753457e6747f95b2abba22eb755d1436caa2f64578be990681adcc40cf4375051677cdf453d39e0b
- SSDEEP 12288:PFUNDafoCCYOVOELbT3th+9GAEuwbpO5B+l5kwYf:PFOaAfOED3theEBO5Ml5Uf
- TLSH T19BF44B4AF7248CAEF6115AB96CE5D07E351C6D312E07CF0B2310B1984F63A6CBD92679
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory