General
- Target 2026-09-26_58bc973384728f0271a2cc66ce230219_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 1.2MB
- Sample260926-2cbdxavwhy
- SHA256 a12eef61c452675c466be4bc54b2ffdda634deef81ec3c4bf73bd193194667bb
- MD5 58bc973384728f0271a2cc66ce230219
- SHA1 0c3e3b356d0a25697667c97d3322acb8caaff2e6
- SHA512 adab6868ea583147eafc36a8ed48fe9ab08c87020490d10d1f9f6183752e21b13e87585c372bc35dd16974dea550bf227a80f76c05a553d506ea8192b806f98c
- SSDEEP 24576:oRXwSUCEi71JBy5WlutCWRSYU3Td9CHKy7GZO:oRXwSJv1zqbRHeTd9CHKyao
- TLSH T18F458CD8F2D818E6E176463D8C728267DE267CA60A31998F1394F31D0E361E1D939F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-26_58bc973384728f0271a2cc66ce230219_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-26_58bc973384728f0271a2cc66ce230219_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 1.2MB
- SHA256 a12eef61c452675c466be4bc54b2ffdda634deef81ec3c4bf73bd193194667bb
- MD5 58bc973384728f0271a2cc66ce230219
- SHA1 0c3e3b356d0a25697667c97d3322acb8caaff2e6
- SHA512 adab6868ea583147eafc36a8ed48fe9ab08c87020490d10d1f9f6183752e21b13e87585c372bc35dd16974dea550bf227a80f76c05a553d506ea8192b806f98c
- SSDEEP 24576:oRXwSUCEi71JBy5WlutCWRSYU3Td9CHKy7GZO:oRXwSJv1zqbRHeTd9CHKyao
- TLSH T18F458CD8F2D818E6E176463D8C728267DE267CA60A31998F1394F31D0E361E1D939F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1