General
- Target 2026-09-04_a3954459e305d9ecb8e0ae7896e48c41_cobalt-strike_elex_icedid_njrat_vidar
- Size 172KB
- Sample260905-bwpsjacr31
- SHA256 d68c329bf1537283e7d47b7f021e7384a8e52288cf281844d610bccf06ad287a
- MD5 a3954459e305d9ecb8e0ae7896e48c41
- SHA1 f6912faacee10df1d861c20c6617707b579b2bd9
- SHA512 2a5128a1700dceef364a17f46e69edb285e80bb5f4338a1558258c349a4ad1a556576f5e0c07bcfcbec8c2eb66c8df9c7c5ce1075a6041d19d2fa340dbb7aa05
- SSDEEP 3072:ez+DePj3CIUdoj1p/filrEjHODVbpEqyLB/0ooJavws5xQuXh:BD3IUdSp/3uDVVU0Tavws5u2
- TLSH T16C04AF67B3A534F9E1738234C8610682A775787607E19BEF039447766F272D0AE3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_a3954459e305d9ecb8e0ae7896e48c41_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_a3954459e305d9ecb8e0ae7896e48c41_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_a3954459e305d9ecb8e0ae7896e48c41_cobalt-strike_elex_icedid_njrat_vidar
- Size 172KB
- SHA256 d68c329bf1537283e7d47b7f021e7384a8e52288cf281844d610bccf06ad287a
- MD5 a3954459e305d9ecb8e0ae7896e48c41
- SHA1 f6912faacee10df1d861c20c6617707b579b2bd9
- SHA512 2a5128a1700dceef364a17f46e69edb285e80bb5f4338a1558258c349a4ad1a556576f5e0c07bcfcbec8c2eb66c8df9c7c5ce1075a6041d19d2fa340dbb7aa05
- SSDEEP 3072:ez+DePj3CIUdoj1p/filrEjHODVbpEqyLB/0ooJavws5xQuXh:BD3IUdSp/3uDVVU0Tavws5u2
- TLSH T16C04AF67B3A534F9E1738234C8610682A775787607E19BEF039447766F272D0AE3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory