General
- Target 2026-09-12_fe6ce8118a4533c891ff8ffcc068c563_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 1.7MB
- Sample260912-rdtxjach76
- SHA256 768be22eee99ce944fa45a314339d79b6fa458c2f35984f909dfa656a7deaff6
- MD5 fe6ce8118a4533c891ff8ffcc068c563
- SHA1 75554eab6b35b0c9863853d2ee908fc14044f177
- SHA512 22452bf8542c7dd1ee4427cd5eb33e5319f026161a7ef5c5e1aae5597e6be3aed765a0e9aac9a29e4be23e97346899fcd9964d49a0e9ad33e7615c149f4c5886
- SSDEEP 24576:PFOakadW2ct4cfjl0zj46IDGJIg8Sp5gv9dCjsQT+EUUlDtP5u1u6EQsrl:t5dW2ctd6jT8GJcoMzU/YRsrl
- TLSH T133859E13ABA901EDE0B791788D678912E776780A07718FDF13C086662F677D1AF7A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_fe6ce8118a4533c891ff8ffcc068c563_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_fe6ce8118a4533c891ff8ffcc068c563_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_fe6ce8118a4533c891ff8ffcc068c563_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 1.7MB
- SHA256 768be22eee99ce944fa45a314339d79b6fa458c2f35984f909dfa656a7deaff6
- MD5 fe6ce8118a4533c891ff8ffcc068c563
- SHA1 75554eab6b35b0c9863853d2ee908fc14044f177
- SHA512 22452bf8542c7dd1ee4427cd5eb33e5319f026161a7ef5c5e1aae5597e6be3aed765a0e9aac9a29e4be23e97346899fcd9964d49a0e9ad33e7615c149f4c5886
- SSDEEP 24576:PFOakadW2ct4cfjl0zj46IDGJIg8Sp5gv9dCjsQT+EUUlDtP5u1u6EQsrl:t5dW2ctd6jT8GJcoMzU/YRsrl
- TLSH T133859E13ABA901EDE0B791788D678912E776780A07718FDF13C086662F677D1AF7A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory