General
- Target 2026-08-11_922a0d620d016f5b8c498617f4a8a081_cobalt-strike_elex_icedid_njrat_vidar
- Size 5.9MB
- Sample260811-hlk5xstyex
- SHA256 27b31214744074e48c3ac7154bfebe0c51bd279dee6e510c432f6728c83e4acd
- MD5 922a0d620d016f5b8c498617f4a8a081
- SHA1 08683947542f587b6cfe937cd96ac0ae8c418f82
- SHA512 5707127976be32f981b1f448c2c4bfb11e3ab438cd489ad13b85b1931e479bd13522a741be56648f2442f5bc8e3a539a6ed582d8cd6e798875a168c7634690ef
- SSDEEP 98304:Bp2UgXq9ouFkULqWQtZ/K0tGOFWVRuLftCTky:Bp2S9+ULqWyZ/K0ttYVAATky
- TLSH T186567B13F58180E9D049D079CB1A96B1EB6EBC1887F1A5EB36907ED53E32AD17B39310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_922a0d620d016f5b8c498617f4a8a081_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_922a0d620d016f5b8c498617f4a8a081_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_922a0d620d016f5b8c498617f4a8a081_cobalt-strike_elex_icedid_njrat_vidar
- Size 5.9MB
- SHA256 27b31214744074e48c3ac7154bfebe0c51bd279dee6e510c432f6728c83e4acd
- MD5 922a0d620d016f5b8c498617f4a8a081
- SHA1 08683947542f587b6cfe937cd96ac0ae8c418f82
- SHA512 5707127976be32f981b1f448c2c4bfb11e3ab438cd489ad13b85b1931e479bd13522a741be56648f2442f5bc8e3a539a6ed582d8cd6e798875a168c7634690ef
- SSDEEP 98304:Bp2UgXq9ouFkULqWQtZ/K0tGOFWVRuLftCTky:Bp2S9+ULqWyZ/K0ttYVAATky
- TLSH T186567B13F58180E9D049D079CB1A96B1EB6EBC1887F1A5EB36907ED53E32AD17B39310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory