General
- Target 2026-08-10_a86a2352ad2a4e36b429c5c14aba87dc_cobalt-strike_elex_icedid_swisyn_vidar
- Size 231KB
- Sample260810-3l8lfa1eng
- SHA256 c6f78cb149ed476e1f92e0e58437fef2ea011e5153bf3ec64660af0d838a01ac
- MD5 a86a2352ad2a4e36b429c5c14aba87dc
- SHA1 597786b8ee69d914f5f59dc0d3e7ee8432068329
- SHA512 c9a398bff43d589a83526b5decfdc09be4b19f46a7cc4eaedafceb95f35a6eda30bd25acdd95dca54b1dbef76c4b2ea0825256ea008d9931c26ced61b483dc01
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalQl8eFbDe2uz4znlWUBjGylwpANM4mTPJa:UsLqdufVUNDaAkv8l95Gylga
- TLSH T143344D176E541CFEE82185F488A58929F7327D7607A09E4B23A16B012F323837EF571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_a86a2352ad2a4e36b429c5c14aba87dc_cobalt-strike_elex_icedid_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_a86a2352ad2a4e36b429c5c14aba87dc_cobalt-strike_elex_icedid_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_a86a2352ad2a4e36b429c5c14aba87dc_cobalt-strike_elex_icedid_swisyn_vidar
- Size 231KB
- SHA256 c6f78cb149ed476e1f92e0e58437fef2ea011e5153bf3ec64660af0d838a01ac
- MD5 a86a2352ad2a4e36b429c5c14aba87dc
- SHA1 597786b8ee69d914f5f59dc0d3e7ee8432068329
- SHA512 c9a398bff43d589a83526b5decfdc09be4b19f46a7cc4eaedafceb95f35a6eda30bd25acdd95dca54b1dbef76c4b2ea0825256ea008d9931c26ced61b483dc01
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalQl8eFbDe2uz4znlWUBjGylwpANM4mTPJa:UsLqdufVUNDaAkv8l95Gylga
- TLSH T143344D176E541CFEE82185F488A58929F7327D7607A09E4B23A16B012F323837EF571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory