General
- Target 2026-10-14_dbac659d45c04b3508ba83cffeec20f1_cobalt-strike_coinminer_elex_icedid_njrat_xloader
- Size 712KB
- Sample261014-mtbzfaby6m
- SHA256 a4b05d0bc64e04d0570c372d1689cb0fd19b72a1ab450ee6ab838d9dd7e91fab
- MD5 dbac659d45c04b3508ba83cffeec20f1
- SHA1 69be863bfac467cc2a0a5577993f6ef65240d779
- SHA512 64e03cb1f44f3dcdba70d1e384a943f51f74426155e0198269274a1cb9d59a66d6a8a43d56c41194553f77627694c0544ae2705844455f0712c821864dccc474
- SSDEEP 12288:56Wq4aaE6KwyF5L0Y2D1PqLb6Wq44er5+nZo6aE6KwyF5L0Y2D1PqLr:PthEVaPqLBt0kEVaPqLr
- TLSH T185F4015E77A9A8D2DC740F30AC714281867178A3AF715A7B24D4630F5C6B1B89E27F38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-14_dbac659d45c04b3508ba83cffeec20f1_cobalt-strike_coinminer_elex_icedid_njrat_xloader.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-14_dbac659d45c04b3508ba83cffeec20f1_cobalt-strike_coinminer_elex_icedid_njrat_xloader.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-14_dbac659d45c04b3508ba83cffeec20f1_cobalt-strike_coinminer_elex_icedid_njrat_xloader
- Size 712KB
- SHA256 a4b05d0bc64e04d0570c372d1689cb0fd19b72a1ab450ee6ab838d9dd7e91fab
- MD5 dbac659d45c04b3508ba83cffeec20f1
- SHA1 69be863bfac467cc2a0a5577993f6ef65240d779
- SHA512 64e03cb1f44f3dcdba70d1e384a943f51f74426155e0198269274a1cb9d59a66d6a8a43d56c41194553f77627694c0544ae2705844455f0712c821864dccc474
- SSDEEP 12288:56Wq4aaE6KwyF5L0Y2D1PqLb6Wq44er5+nZo6aE6KwyF5L0Y2D1PqLr:PthEVaPqLBt0kEVaPqLr
- TLSH T185F4015E77A9A8D2DC740F30AC714281867178A3AF715A7B24D4630F5C6B1B89E27F38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.