General
- Target 2026-10-13_ccfcbc015404d3fa25249505133b1e8f_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 1013KB
- Sample261014-gjwcfaef84
- SHA256 49482b2622f7afc04e227a13cbf598b66906a0922bc534cc8ef31058a7f3a35e
- MD5 ccfcbc015404d3fa25249505133b1e8f
- SHA1 3efcd05557f5b8bafba2beca56fa7d6f66e148d6
- SHA512 643a518671a929510f26342404e7ea1a1c823856deefa556a8ec66809faa2c6fbcc87dfddcaa5574c4b243728bd88ffcb5fce41af9061440c59c91ca979de450
- SSDEEP 12288:ZhTp1Prs2rXTOjKsK3iX6Eyk9qemcw19DsYTw5iIRTQ6iZwb5zzFEoS2cPvyX:ZJp1PzOjKsKSXmVcwDZE0ZM9zFVSOX
- TLSH T1CA258C0E347088E7CC6E5DB488CA7594D9B2AC1EA911860F67E03F1EEE3319499653FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-13_ccfcbc015404d3fa25249505133b1e8f_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_ccfcbc015404d3fa25249505133b1e8f_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 1013KB
- SHA256 49482b2622f7afc04e227a13cbf598b66906a0922bc534cc8ef31058a7f3a35e
- MD5 ccfcbc015404d3fa25249505133b1e8f
- SHA1 3efcd05557f5b8bafba2beca56fa7d6f66e148d6
- SHA512 643a518671a929510f26342404e7ea1a1c823856deefa556a8ec66809faa2c6fbcc87dfddcaa5574c4b243728bd88ffcb5fce41af9061440c59c91ca979de450
- SSDEEP 12288:ZhTp1Prs2rXTOjKsK3iX6Eyk9qemcw19DsYTw5iIRTQ6iZwb5zzFEoS2cPvyX:ZJp1PzOjKsKSXmVcwDZE0ZM9zFVSOX
- TLSH T1CA258C0E347088E7CC6E5DB488CA7594D9B2AC1EA911860F67E03F1EEE3319499653FD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1