General
- Target 2026-09-13_d82f24c9f086973ebfedc752f313a2cf_cobalt-strike_elex_icedid_njrat_nymaim_rhadamanthys_smoke-loader_stealc_tofsee_vidar
- Size 4.0MB
- Sample260914-bdp1kszzcs
- SHA256 ce26e493d6ca14e7a096543a647673b2dd34365e82c272468f548572b081d99c
- MD5 d82f24c9f086973ebfedc752f313a2cf
- SHA1 9b9fcddf326fde8bf25bec7d1774878036fd1ff5
- SHA512 ed8d81bf766d6612baf1bc6c709998efa882932e66a20390b0f41a1a01356bcbc66b63d91d7af8fc1c4201d0c107ce1df000783a704630f5d3e0447703f99419
- SSDEEP 49152:vIn0K/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSq4vFWVRxYOKKJY+lk:EmWQtZ/K0tGOFWVRuLftCT2
- TLSH T111165913F58540E9D05AC179CF269232EB227C590BF2B5EF269076E52E37AE07B38714
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-13_d82f24c9f086973ebfedc752f313a2cf_cobalt-strike_elex_icedid_njrat_nymaim_rhadamanthys_smok.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_d82f24c9f086973ebfedc752f313a2cf_cobalt-strike_elex_icedid_njrat_nymaim_rhadamanthys_smoke-loader_stealc_tofsee_vidar
- Size 4.0MB
- SHA256 ce26e493d6ca14e7a096543a647673b2dd34365e82c272468f548572b081d99c
- MD5 d82f24c9f086973ebfedc752f313a2cf
- SHA1 9b9fcddf326fde8bf25bec7d1774878036fd1ff5
- SHA512 ed8d81bf766d6612baf1bc6c709998efa882932e66a20390b0f41a1a01356bcbc66b63d91d7af8fc1c4201d0c107ce1df000783a704630f5d3e0447703f99419
- SSDEEP 49152:vIn0K/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSq4vFWVRxYOKKJY+lk:EmWQtZ/K0tGOFWVRuLftCT2
- TLSH T111165913F58540E9D05AC179CF269232EB227C590BF2B5EF269076E52E37AE07B38714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Shodi worm
-
Drops file in System32 directory