General
- Target 2026-09-12_3d6aa6a674877137dd64cb9589c77e8a_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 1.7MB
- Sample260913-dq9a4aed52
- SHA256 4d0aed82dde83fba9c824ac05476ae8791f7100629d1100e5a3aba5217e73676
- MD5 3d6aa6a674877137dd64cb9589c77e8a
- SHA1 4879316e5759bb76ceafb28ab465883bc54d27ad
- SHA512 bccbd2e51c10fa3555d1d5048bdd2000edc54105033aa547f17b2d5cece25368eb4aee89e40e47d9e9c5b2acd321d4b0c29d2474e93b28e1e97090cfa115d21b
- SSDEEP 24576:PFOa0adW2ct4cfjl0zj46IDGJIg8Sp5gv9dCjsQT+EUUlDtP5u1u6EQsrN:t5dW2ctd6jT8GJcoMzU/YRsrN
- TLSH T13A859E13A7A901EDE1A781788E678903E776780A07709FDF13D096622F677D1AF7A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_3d6aa6a674877137dd64cb9589c77e8a_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_3d6aa6a674877137dd64cb9589c77e8a_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_3d6aa6a674877137dd64cb9589c77e8a_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 1.7MB
- SHA256 4d0aed82dde83fba9c824ac05476ae8791f7100629d1100e5a3aba5217e73676
- MD5 3d6aa6a674877137dd64cb9589c77e8a
- SHA1 4879316e5759bb76ceafb28ab465883bc54d27ad
- SHA512 bccbd2e51c10fa3555d1d5048bdd2000edc54105033aa547f17b2d5cece25368eb4aee89e40e47d9e9c5b2acd321d4b0c29d2474e93b28e1e97090cfa115d21b
- SSDEEP 24576:PFOa0adW2ct4cfjl0zj46IDGJIg8Sp5gv9dCjsQT+EUUlDtP5u1u6EQsrN:t5dW2ctd6jT8GJcoMzU/YRsrN
- TLSH T13A859E13A7A901EDE1A781788E678903E776780A07709FDF13D096622F677D1AF7A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory