General
- Target 2026-09-09_105d2c421536159bb08ab33b266fddbe_cobalt-strike_elex_icedid_vidar
- Size 177KB
- Sample260910-ahhxdssdke
- SHA256 d34cdcb586f434f62e68125ba8a4165b564c8fa9800ce88d1cfa99a7a7ee43fb
- MD5 105d2c421536159bb08ab33b266fddbe
- SHA1 bf6f7ca790e26375357543d63c4a019c8f8262d1
- SHA512 b1a5d07930004324fdceb8b0ca8ac39c2c5394c40598c3f3f8eb667760f0b269a341738c11b729f123767c63b07691c25cd766843da278a2e392d781e1cac7a2
- SSDEEP 3072:8gpgFOdpFd9iKhiRDuUlb2KnGXVh/S3O0OFbkD10VBwdmaKzV6UMnTUtBlrHSWs/:8Wgad99KDuUlpONK2xNVBwqV6RUlr5P6
- TLSH T1D8048D4767E430F5E8668630D8624B15D732FC724660CB5F13A8B25A9F333909E2AFE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_105d2c421536159bb08ab33b266fddbe_cobalt-strike_elex_icedid_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_105d2c421536159bb08ab33b266fddbe_cobalt-strike_elex_icedid_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_105d2c421536159bb08ab33b266fddbe_cobalt-strike_elex_icedid_vidar
- Size 177KB
- SHA256 d34cdcb586f434f62e68125ba8a4165b564c8fa9800ce88d1cfa99a7a7ee43fb
- MD5 105d2c421536159bb08ab33b266fddbe
- SHA1 bf6f7ca790e26375357543d63c4a019c8f8262d1
- SHA512 b1a5d07930004324fdceb8b0ca8ac39c2c5394c40598c3f3f8eb667760f0b269a341738c11b729f123767c63b07691c25cd766843da278a2e392d781e1cac7a2
- SSDEEP 3072:8gpgFOdpFd9iKhiRDuUlb2KnGXVh/S3O0OFbkD10VBwdmaKzV6UMnTUtBlrHSWs/:8Wgad99KDuUlpONK2xNVBwqV6RUlr5P6
- TLSH T1D8048D4767E430F5E8668630D8624B15D732FC724660CB5F13A8B25A9F333909E2AFE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application