General
- Target 2026-08-28_424d0394fba249d4365f212826f5cca9_cobalt-strike_elex_icedid_njrat_vidar
- Size 701KB
- Sample260828-wf16va1fpf
- SHA256 976fc3bd11a76ced8dd63c50ccad6417ac43e4a7f612a5b713f10f3342d042fc
- MD5 424d0394fba249d4365f212826f5cca9
- SHA1 aa8ea5c975e389bcfde6f6399376647912423989
- SHA512 2d28989a07e529c72c15312ee440372e3fece998078f6e5b21a4a09f18162733a7b7619c173a1c8ebf33e2ffc0fa17ed35b3c0e1cf17d55dbac243d9fc30d2fb
- SSDEEP 12288:w4Ryed8I7r/7ml4Ryed8I7r/7mTL1fh7NhO0ZUVL1fh7NhO0ZUPXAm3ggRUeMz9H:w4R5CIH/7e4R5CIH/7020Gx20Gom3NCz
- TLSH T171E44B21B39044A9F473C97EA874850AAA367D710A61DE5F7380770A1E336D3BC75B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_424d0394fba249d4365f212826f5cca9_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_424d0394fba249d4365f212826f5cca9_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_424d0394fba249d4365f212826f5cca9_cobalt-strike_elex_icedid_njrat_vidar
- Size 701KB
- SHA256 976fc3bd11a76ced8dd63c50ccad6417ac43e4a7f612a5b713f10f3342d042fc
- MD5 424d0394fba249d4365f212826f5cca9
- SHA1 aa8ea5c975e389bcfde6f6399376647912423989
- SHA512 2d28989a07e529c72c15312ee440372e3fece998078f6e5b21a4a09f18162733a7b7619c173a1c8ebf33e2ffc0fa17ed35b3c0e1cf17d55dbac243d9fc30d2fb
- SSDEEP 12288:w4Ryed8I7r/7ml4Ryed8I7r/7mTL1fh7NhO0ZUVL1fh7NhO0ZUPXAm3ggRUeMz9H:w4R5CIH/7e4R5CIH/7020Gx20Gom3NCz
- TLSH T171E44B21B39044A9F473C97EA874850AAA367D710A61DE5F7380770A1E336D3BC75B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1