General
- Target 2026-10-02_4036f0b0d8c6dcb68cc7b3604dc7dfd3_cobalt-strike_darkgate_elex_gcleaner_hijackloader_icedid_njrat_vidar
- Size 1.2MB
- Sample261003-rbed3ade95
- SHA256 98ce5ba4265c72f090c4ba081133d5a253c9d70630882a6ce3abaec8e7b632a6
- MD5 4036f0b0d8c6dcb68cc7b3604dc7dfd3
- SHA1 843ee5a02432c4b2788916b35922ba992e3971af
- SHA512 2c9bce5c019b330646ada7858db81ff7a4adf5b81b7ed7f6a84e00ee63af62b9871457b8b302b99b984fc5e26d32a7039ec05fc906f890d69aabbd30b67532d8
- SSDEEP 12288:t2Jbc2yYltyimI1oWPGD36eU+N3PsEqtpn0KPRTSl/XalFW9F1i7jpiho3FMtJl:t2Jb8ds436epN7w3PROWFW9sQ0MtJl
- TLSH T15E559D2BB6D540F9D02AC5788A568172E972BC521F34A6DF06D0B7192F3BAE42F3D311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_4036f0b0d8c6dcb68cc7b3604dc7dfd3_cobalt-strike_darkgate_elex_gcleaner_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_4036f0b0d8c6dcb68cc7b3604dc7dfd3_cobalt-strike_darkgate_elex_gcleaner_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_4036f0b0d8c6dcb68cc7b3604dc7dfd3_cobalt-strike_darkgate_elex_gcleaner_hijackloader_icedid_njrat_vidar
- Size 1.2MB
- SHA256 98ce5ba4265c72f090c4ba081133d5a253c9d70630882a6ce3abaec8e7b632a6
- MD5 4036f0b0d8c6dcb68cc7b3604dc7dfd3
- SHA1 843ee5a02432c4b2788916b35922ba992e3971af
- SHA512 2c9bce5c019b330646ada7858db81ff7a4adf5b81b7ed7f6a84e00ee63af62b9871457b8b302b99b984fc5e26d32a7039ec05fc906f890d69aabbd30b67532d8
- SSDEEP 12288:t2Jbc2yYltyimI1oWPGD36eU+N3PsEqtpn0KPRTSl/XalFW9F1i7jpiho3FMtJl:t2Jb8ds436epN7w3PROWFW9sQ0MtJl
- TLSH T15E559D2BB6D540F9D02AC5788A568172E972BC521F34A6DF06D0B7192F3BAE42F3D311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.