General
- Target 2026-09-30_078b18c0e66b02e004a05992777356b6_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 993KB
- Sample260930-rlj3asvcmb
- SHA256 6d8bcfbe69831955c89e369e413a4007c7ab678c74deafdf0bda24eef3cbfe39
- MD5 078b18c0e66b02e004a05992777356b6
- SHA1 9df5710f53bb5fd86ef1a14b6530ef9f69be39bd
- SHA512 37303fdd61566d6bd4fc024fefa8479e56a48b472e30c11cf6fcc1c6c15eb5d0fb4e4204ab10086559a5535e4d14e007b2043cb6f1f9bd3afd34f34e8dc7a3cb
- SSDEEP 24576:QrfD3xmPM8cJ+tyRuVKWJr3bgufSXNdZM9zFVSOX:6Z8cJ+EROpbNSXZM9zf7
- TLSH T1D625C00A76DBBCA5F224493A98A96E73C2767C410B508B4F0F5D724EDD3F5922874AF0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_078b18c0e66b02e004a05992777356b6_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_078b18c0e66b02e004a05992777356b6_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 993KB
- SHA256 6d8bcfbe69831955c89e369e413a4007c7ab678c74deafdf0bda24eef3cbfe39
- MD5 078b18c0e66b02e004a05992777356b6
- SHA1 9df5710f53bb5fd86ef1a14b6530ef9f69be39bd
- SHA512 37303fdd61566d6bd4fc024fefa8479e56a48b472e30c11cf6fcc1c6c15eb5d0fb4e4204ab10086559a5535e4d14e007b2043cb6f1f9bd3afd34f34e8dc7a3cb
- SSDEEP 24576:QrfD3xmPM8cJ+tyRuVKWJr3bgufSXNdZM9zFVSOX:6Z8cJ+EROpbNSXZM9zf7
- TLSH T1D625C00A76DBBCA5F224493A98A96E73C2767C410B508B4F0F5D724EDD3F5922874AF0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1