General
- Target 2026-08-23_564421b40461f38821aa88fb6e0e1afb_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar
- Size 2.8MB
- Sample260824-nnfacaxame
- SHA256 a613004730e16ec68e1b43d41224fd87e27f5be618a00b87ad3b56a0932a6263
- MD5 564421b40461f38821aa88fb6e0e1afb
- SHA1 2d053bad4e6a88289b007b566b813914ddf63dee
- SHA512 11f820c8a5d3517bda4856611f0cb8240f9520a7f6b4bc907c89cb77e73773bb5c63bb08ed6e31ffbb68dde90eba8aafd7b31cc1d8683dd8f4b4777c65c90652
- SSDEEP 49152:r6F0eMpAAYEhp0Qhw7lP+ByStjQ0Q0pMAHM8636qXueRaQWo:60nAAYEp7hicBK8yR
- TLSH T165D53A66B247C0F4D45A50B0CF069FF6D5706C2DC2E28B9B56C8FE11BF326A1397A219
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-23_564421b40461f38821aa88fb6e0e1afb_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_564421b40461f38821aa88fb6e0e1afb_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar
- Size 2.8MB
- SHA256 a613004730e16ec68e1b43d41224fd87e27f5be618a00b87ad3b56a0932a6263
- MD5 564421b40461f38821aa88fb6e0e1afb
- SHA1 2d053bad4e6a88289b007b566b813914ddf63dee
- SHA512 11f820c8a5d3517bda4856611f0cb8240f9520a7f6b4bc907c89cb77e73773bb5c63bb08ed6e31ffbb68dde90eba8aafd7b31cc1d8683dd8f4b4777c65c90652
- SSDEEP 49152:r6F0eMpAAYEhp0Qhw7lP+ByStjQ0Q0pMAHM8636qXueRaQWo:60nAAYEp7hicBK8yR
- TLSH T165D53A66B247C0F4D45A50B0CF069FF6D5706C2DC2E28B9B56C8FE11BF326A1397A219
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE