General
- Target 2026-08-31_6f6065a67785bdb9e2cfb7464d75465a_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 828KB
- Sample260831-xfpcqaem5t
- SHA256 3c6098eef80567015166a62690e71c33eb17b41f7a6e9094d6f4e35eb40d449a
- MD5 6f6065a67785bdb9e2cfb7464d75465a
- SHA1 468e9252517940921d486d08850452e3710e757e
- SHA512 2c7466ce6d82afe2e3ed4ac0bfa3d6ed57e4d28e047df1caa7ec3de04558fbf40132896c52245551f5ab25a9f4c7622204ea27e3f947b436c6f8f62d63db103b
- SSDEEP 12288:w4Ryed8I7r/7m+U6sIhc4Ryed8I7r/7mVU6sIhn9pFV8qN+85Y5s8l3t5v4JAdGy:w4R5CIH/7fc4R5CIH/7QD3Idd5QJ+Rv
- TLSH T1C1057D22F74054A9F822E170A825A506B9317D710B9099DB73D2BB2D2E332D37B7573B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-31_6f6065a67785bdb9e2cfb7464d75465a_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_6f6065a67785bdb9e2cfb7464d75465a_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 828KB
- SHA256 3c6098eef80567015166a62690e71c33eb17b41f7a6e9094d6f4e35eb40d449a
- MD5 6f6065a67785bdb9e2cfb7464d75465a
- SHA1 468e9252517940921d486d08850452e3710e757e
- SHA512 2c7466ce6d82afe2e3ed4ac0bfa3d6ed57e4d28e047df1caa7ec3de04558fbf40132896c52245551f5ab25a9f4c7622204ea27e3f947b436c6f8f62d63db103b
- SSDEEP 12288:w4Ryed8I7r/7m+U6sIhc4Ryed8I7r/7mVU6sIhn9pFV8qN+85Y5s8l3t5v4JAdGy:w4R5CIH/7fc4R5CIH/7QD3Idd5QJ+Rv
- TLSH T1C1057D22F74054A9F822E170A825A506B9317D710B9099DB73D2BB2D2E332D37B7573B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory