General
- Target 2026-08-21_68a9cbb5d7af07de28cdf90b7f5d7433_cobalt-strike_elex_icedid_njrat_swisyn_vidar
- Size 881KB
- Sample260821-e3fpzsgm31
- SHA256 a0e31dd6db13292a4637e64eecb3bf6f7e985cb21afc951dd232f4ce8a61f6c1
- MD5 68a9cbb5d7af07de28cdf90b7f5d7433
- SHA1 9845ced9e162028c14722c35149a913e0f4f15b9
- SHA512 f4e1b49c4b572fec1c7ce191dc5dac4f0d0e711c3f0f09e58feba6e1664fd31a0c8fa3fba634a7be4f50ecaa926af56160f95fcd6243ce6e48ae721ad3021ba6
- SSDEEP 12288:PFUNDaMp99WL/vCzx3QRIL4DbKsxA/3SYsF2WKEnkiUJ0yd:PFOaU8/vaN4PKsxisF2L+yd
- TLSH T1B115A01F6A71057AD4A68270C495861BFAB534100324AEEF22FC5B712F77A473E7EB06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_68a9cbb5d7af07de28cdf90b7f5d7433_cobalt-strike_elex_icedid_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_68a9cbb5d7af07de28cdf90b7f5d7433_cobalt-strike_elex_icedid_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_68a9cbb5d7af07de28cdf90b7f5d7433_cobalt-strike_elex_icedid_njrat_swisyn_vidar
- Size 881KB
- SHA256 a0e31dd6db13292a4637e64eecb3bf6f7e985cb21afc951dd232f4ce8a61f6c1
- MD5 68a9cbb5d7af07de28cdf90b7f5d7433
- SHA1 9845ced9e162028c14722c35149a913e0f4f15b9
- SHA512 f4e1b49c4b572fec1c7ce191dc5dac4f0d0e711c3f0f09e58feba6e1664fd31a0c8fa3fba634a7be4f50ecaa926af56160f95fcd6243ce6e48ae721ad3021ba6
- SSDEEP 12288:PFUNDaMp99WL/vCzx3QRIL4DbKsxA/3SYsF2WKEnkiUJ0yd:PFOaU8/vaN4PKsxisF2L+yd
- TLSH T1B115A01F6A71057AD4A68270C495861BFAB534100324AEEF22FC5B712F77A473E7EB06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory