General
- Target 2026-08-13_82dbf29363c359d0e4d2c994f6b48dfa_cobalt-strike_coinminer_elex_icedid_njrat
- Size 961KB
- Sample260813-e2mrxabk31
- SHA256 a1f11856b04d50d5c9a60eadb000d7ecfdacb0077106885b1b22ed8e8543a5d6
- MD5 82dbf29363c359d0e4d2c994f6b48dfa
- SHA1 9264e58978c50a9c44ce49fef231b8940e635d9a
- SHA512 d4464a3e63bc0a9bba7d86e5304f03f62504c252f595e84f7c5e529b1b10b4a83548e3aec98c51bac24b4579b7213f3d871a10b3518e496de1c8f371f5c8d5eb
- SSDEEP 12288:86Wq4aaE6KwyF5L0Y2D1PqLb6Wq44er5+nZoyfL1W0mer5+nIwaJVer5+nBo6:6thEVaPqLBt0EE1N
- TLSH T157255A07B2559CD3CBE54A74DC24C6A55322B89DAFF34673788453CE7C6B284BE26B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-13_82dbf29363c359d0e4d2c994f6b48dfa_cobalt-strike_coinminer_elex_icedid_njrat.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_82dbf29363c359d0e4d2c994f6b48dfa_cobalt-strike_coinminer_elex_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_82dbf29363c359d0e4d2c994f6b48dfa_cobalt-strike_coinminer_elex_icedid_njrat
- Size 961KB
- SHA256 a1f11856b04d50d5c9a60eadb000d7ecfdacb0077106885b1b22ed8e8543a5d6
- MD5 82dbf29363c359d0e4d2c994f6b48dfa
- SHA1 9264e58978c50a9c44ce49fef231b8940e635d9a
- SHA512 d4464a3e63bc0a9bba7d86e5304f03f62504c252f595e84f7c5e529b1b10b4a83548e3aec98c51bac24b4579b7213f3d871a10b3518e496de1c8f371f5c8d5eb
- SSDEEP 12288:86Wq4aaE6KwyF5L0Y2D1PqLb6Wq44er5+nZoyfL1W0mer5+nIwaJVer5+nBo6:6thEVaPqLBt0EE1N
- TLSH T157255A07B2559CD3CBE54A74DC24C6A55322B89DAFF34673788453CE7C6B284BE26B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.