General
- Target 2026-09-05_4fa46d9457b2e099d57291cc7a0fdd22_coinminer_elex_hijackloader_icedid_njrat_vidar
- Size 8.5MB
- Sample260907-26ch3axdjf
- SHA256 434695c65d5a53dfdf28cee34da76546a631d44066981408451bc0e2fb12d5f0
- MD5 4fa46d9457b2e099d57291cc7a0fdd22
- SHA1 d360350a733eada9e1773f24f9c1e359ac61d536
- SHA512 b0e9bb15eb85828f9584ca99bcad651c722a38b809a380c92bb28484baba022d781e07db6e7e31791eb33614cc81953c1af57857fd757954102a60b496ee18ab
- SSDEEP 49152:U+ES+EZ+ES+EZ+ES+EVQ+ES+EZ+ES+EZ+ES+EVQ+ES+EZ+ES+EZ+ES+EVQ+ES+E0:zXXXXXXXX9n7Ox
- TLSH T102966C09F99204F1D96B417049CBD27EC631BE2187128EEFE749D71BAE33BE16838615
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-05_4fa46d9457b2e099d57291cc7a0fdd22_coinminer_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_4fa46d9457b2e099d57291cc7a0fdd22_coinminer_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_4fa46d9457b2e099d57291cc7a0fdd22_coinminer_elex_hijackloader_icedid_njrat_vidar
- Size 8.5MB
- SHA256 434695c65d5a53dfdf28cee34da76546a631d44066981408451bc0e2fb12d5f0
- MD5 4fa46d9457b2e099d57291cc7a0fdd22
- SHA1 d360350a733eada9e1773f24f9c1e359ac61d536
- SHA512 b0e9bb15eb85828f9584ca99bcad651c722a38b809a380c92bb28484baba022d781e07db6e7e31791eb33614cc81953c1af57857fd757954102a60b496ee18ab
- SSDEEP 49152:U+ES+EZ+ES+EZ+ES+EVQ+ES+EZ+ES+EZ+ES+EVQ+ES+EZ+ES+EZ+ES+EVQ+ES+E0:zXXXXXXXX9n7Ox
- TLSH T102966C09F99204F1D96B417049CBD27EC631BE2187128EEFE749D71BAE33BE16838615
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1