General

  • Target
    2026-09-11_10e562aaedf28804a4a9ad45e3c72b14_cobalt-strike_coinminer_elex_icedid_njrat
  • Size 960KB
  • Sample260912-qcntfsxeph
  • SHA256 eab4b43e3205ce40ef61ae9a3b456bd539b3c7c3308a90206a35a806bff99a72
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-09-11_10e562aaedf28804a4a9ad45e3c72b14_cobalt-strike_coinminer_elex_icedid_njrat
    • Size 960KB
    • SHA256 eab4b43e3205ce40ef61ae9a3b456bd539b3c7c3308a90206a35a806bff99a72
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies visibility of file extensions in Explorer

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks