General
- Target 2026-09-03_cb4478774bb263587a691ba69e790872_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 5.1MB
- Sample260905-1amhqazvbz
- SHA256 e96074686fa8092ef8726ed8f07910d3117d98568ae329a7844e883c2d2eb4aa
- MD5 cb4478774bb263587a691ba69e790872
- SHA1 306c6219e1d8905b8138cb83c71235fd4a8a66a4
- SHA512 3c3e13ce6f959fb65d52d7a46fca2ab9fdc05a23f6ba359e421a19190b3d96186d6433abff2612e27e7fde395a5ed4f75665956fb6ca31c94b296dc5bc7497f0
- SSDEEP 98304:CTcMecBxDY8bBQ4H0XeFLOAkGkzdnEVomFHKnP9G:CTc5cTqu0XeFLOyomFHKnP0
- TLSH T14546AE566EFD00D8D4AAD07AC957492BDBF27C621731839B0160776B6F337960E2E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_cb4478774bb263587a691ba69e790872_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_cb4478774bb263587a691ba69e790872_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_cb4478774bb263587a691ba69e790872_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 5.1MB
- SHA256 e96074686fa8092ef8726ed8f07910d3117d98568ae329a7844e883c2d2eb4aa
- MD5 cb4478774bb263587a691ba69e790872
- SHA1 306c6219e1d8905b8138cb83c71235fd4a8a66a4
- SHA512 3c3e13ce6f959fb65d52d7a46fca2ab9fdc05a23f6ba359e421a19190b3d96186d6433abff2612e27e7fde395a5ed4f75665956fb6ca31c94b296dc5bc7497f0
- SSDEEP 98304:CTcMecBxDY8bBQ4H0XeFLOAkGkzdnEVomFHKnP9G:CTc5cTqu0XeFLOyomFHKnP0
- TLSH T14546AE566EFD00D8D4AAD07AC957492BDBF27C621731839B0160776B6F337960E2E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory