General
- Target 2026-08-24_55f6c8d0fb5aa0623b52a166f09edca0_cobalt-strike_elex_icedid_njrat_swisyn_vidar
- Size 986KB
- Sample260825-qb442sserf
- SHA256 be7840b6919ff26df97373bd29bcd3e666ea1e71c9575c7e221a94aac526941c
- MD5 55f6c8d0fb5aa0623b52a166f09edca0
- SHA1 5a19ac8135372619c7f6269cf0781b5885d607c3
- SHA512 e639af6f1af1b15eed43139448e51e7454d14070bccabea6bf1a24e56ca47ebe4622ac68dee4397e1e0be51a6eceffd4bf8fa10f5fe04964ce0c2f4b922efff6
- SSDEEP 12288:cFUNDaGvUqxjFErFs6NAfl2RADPkG0we4f5NmiBU3nTYyo:cFOaYpFE9s23we4f5NmiBmn2
- TLSH T16F25AE663BE400E5E477D175CAA58657FCB178121B30DA8F03A443792F337C1AA7A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_55f6c8d0fb5aa0623b52a166f09edca0_cobalt-strike_elex_icedid_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_55f6c8d0fb5aa0623b52a166f09edca0_cobalt-strike_elex_icedid_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_55f6c8d0fb5aa0623b52a166f09edca0_cobalt-strike_elex_icedid_njrat_swisyn_vidar
- Size 986KB
- SHA256 be7840b6919ff26df97373bd29bcd3e666ea1e71c9575c7e221a94aac526941c
- MD5 55f6c8d0fb5aa0623b52a166f09edca0
- SHA1 5a19ac8135372619c7f6269cf0781b5885d607c3
- SHA512 e639af6f1af1b15eed43139448e51e7454d14070bccabea6bf1a24e56ca47ebe4622ac68dee4397e1e0be51a6eceffd4bf8fa10f5fe04964ce0c2f4b922efff6
- SSDEEP 12288:cFUNDaGvUqxjFErFs6NAfl2RADPkG0we4f5NmiBU3nTYyo:cFOaYpFE9s23we4f5NmiBmn2
- TLSH T16F25AE663BE400E5E477D175CAA58657FCB178121B30DA8F03A443792F337C1AA7A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory