General
- Target 2026-08-25_a61195f03ee9a62baf8a64e78d15cd59_cobalt-strike_elex_hijackloader_icedid_njrat_nymaim_rhadamanthys_smoke-loader_vidar
- Size 5.0MB
- Sample260826-ryc5hs1bjc
- SHA256 0ffa87b70df78d3e13989ffc01aa5df7054cc824c12fef8c8a515b8ab7e0bc9e
- MD5 a61195f03ee9a62baf8a64e78d15cd59
- SHA1 9a7b72c46aa9a239466376097734de60f70e6d73
- SHA512 2d05c783ef7e485a32f6550b680a3a268c86bc78ee145aeafcc240c4214ef9b1ed264e3dc616787bed99add791675de24f338d221f4f8b78f12565010d9ac4fa
- SSDEEP 49152:DHRaYSDA+ouZ/K0tDg/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSq4vp:TRUZ/K0tzWQtZ/K0tGOFWVRuLftCTm
- TLSH T111366B13F6E940E8E0AAD178CF3692319B727C5A4BF1A5DF224072D51E76AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_a61195f03ee9a62baf8a64e78d15cd59_cobalt-strike_elex_hijackloader_icedid_njrat_nymaim_rhad.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_a61195f03ee9a62baf8a64e78d15cd59_cobalt-strike_elex_hijackloader_icedid_njrat_nymaim_rhadamanthys_smoke-loader_vidar
- Size 5.0MB
- SHA256 0ffa87b70df78d3e13989ffc01aa5df7054cc824c12fef8c8a515b8ab7e0bc9e
- MD5 a61195f03ee9a62baf8a64e78d15cd59
- SHA1 9a7b72c46aa9a239466376097734de60f70e6d73
- SHA512 2d05c783ef7e485a32f6550b680a3a268c86bc78ee145aeafcc240c4214ef9b1ed264e3dc616787bed99add791675de24f338d221f4f8b78f12565010d9ac4fa
- SSDEEP 49152:DHRaYSDA+ouZ/K0tDg/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSq4vp:TRUZ/K0tzWQtZ/K0tGOFWVRuLftCTm
- TLSH T111366B13F6E940E8E0AAD178CF3692319B727C5A4BF1A5DF224072D51E76AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1