General
- Target 2026-08-27_577aed2ad45020709676e80618be6db6_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 3.7MB
- Sample260827-vwrfxayera
- SHA256 247ea709aa22c6f273d911c532a3c21f44ce53ba61001a10201630bfd0c90894
- MD5 577aed2ad45020709676e80618be6db6
- SHA1 0d0fb105c2d5052e601ba477684bcedb92f9fea8
- SHA512 a012ca8f3454459d7ad700a7ec7e6a33c814d4062007d1541647bcad21507b671f2ce567f1e48bff3477f226721ff7f6fed9ee1c9517612141a7f095d57a9bd6
- SSDEEP 49152:t1BZqAy/JQ+5+sOdi6e9nm+Ciu45+9WWPUsbKqiItWnRb6xSckDRlLE2AT4g9CTc:YrlPqGnRTDRBE244gt
- TLSH T1E2067D8567FD40E5DAA7D078C52B890FD6B27C57033487DB02A08B5A6F336621E7E362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_577aed2ad45020709676e80618be6db6_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_577aed2ad45020709676e80618be6db6_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_577aed2ad45020709676e80618be6db6_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 3.7MB
- SHA256 247ea709aa22c6f273d911c532a3c21f44ce53ba61001a10201630bfd0c90894
- MD5 577aed2ad45020709676e80618be6db6
- SHA1 0d0fb105c2d5052e601ba477684bcedb92f9fea8
- SHA512 a012ca8f3454459d7ad700a7ec7e6a33c814d4062007d1541647bcad21507b671f2ce567f1e48bff3477f226721ff7f6fed9ee1c9517612141a7f095d57a9bd6
- SSDEEP 49152:t1BZqAy/JQ+5+sOdi6e9nm+Ciu45+9WWPUsbKqiItWnRb6xSckDRlLE2AT4g9CTc:YrlPqGnRTDRBE244gt
- TLSH T1E2067D8567FD40E5DAA7D078C52B890FD6B27C57033487DB02A08B5A6F336621E7E362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory