General
- Target 2026-09-09_dbf4ac082ff2744b8192d09013addd61_cobalt-strike_coinminer_elex_icedid_njrat_xloader
- Size 712KB
- Sample260910-2n46csxare
- SHA256 7237bb0d4576c51f0b5d0772c25c3626aa8f21559f75d744450c95bfc689b25b
- MD5 dbf4ac082ff2744b8192d09013addd61
- SHA1 d8849e44a4a0c4cfc03abb720dde5952a2048dfc
- SHA512 6b2e273f4d679e4926efd2cfcd6be93edb084fd9d1942da56a32d97b51ee3194ec0a658ed8d339d692d83a1572c26344ef112c3706e0d44ff22208d79a70663e
- SSDEEP 12288:56Wq4aaE6KwyF5L0Y2D1PqLb6Wq44er5+nZo6aE6KwyF5L0Y2D1PqL7:PthEVaPqLBt0kEVaPqL7
- TLSH T1C1F4015E77A9A8D2DC740F31AC714281827178A3AF705A7B24D4630F5C6B1B89E27F38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-09_dbf4ac082ff2744b8192d09013addd61_cobalt-strike_coinminer_elex_icedid_njrat_xloader.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_dbf4ac082ff2744b8192d09013addd61_cobalt-strike_coinminer_elex_icedid_njrat_xloader.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_dbf4ac082ff2744b8192d09013addd61_cobalt-strike_coinminer_elex_icedid_njrat_xloader
- Size 712KB
- SHA256 7237bb0d4576c51f0b5d0772c25c3626aa8f21559f75d744450c95bfc689b25b
- MD5 dbf4ac082ff2744b8192d09013addd61
- SHA1 d8849e44a4a0c4cfc03abb720dde5952a2048dfc
- SHA512 6b2e273f4d679e4926efd2cfcd6be93edb084fd9d1942da56a32d97b51ee3194ec0a658ed8d339d692d83a1572c26344ef112c3706e0d44ff22208d79a70663e
- SSDEEP 12288:56Wq4aaE6KwyF5L0Y2D1PqLb6Wq44er5+nZo6aE6KwyF5L0Y2D1PqL7:PthEVaPqLBt0kEVaPqL7
- TLSH T1C1F4015E77A9A8D2DC740F31AC714281827178A3AF705A7B24D4630F5C6B1B89E27F38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.