General
- Target 2026-10-22_a45764f7ed2107e54f77486852cd1cd9_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 1.1MB
- Sample261024-ch78dsea64
- SHA256 06417d6857a7b30897f028897477f86a20b1592dfc0d45622668cd23baea7848
- MD5 a45764f7ed2107e54f77486852cd1cd9
- SHA1 f68fb0223c64c69b002061e084d9c4745a7d4172
- SHA512 478cccb666cc21166e35efad8614c4f75b313ee7b2c6eb5ff958cf59dc49b1c916ecfc31f3d2e8a0b72ce81b5d35cfefc77bd2b2e829d86cebe5b28231ab0654
- SSDEEP 12288:HtCab5qvJvD65TGNJIi0hGFvhMe3cdTdcw5iFJCi4e7WRdTfgwCHKy7GLbbdIvWW:Aab5qvdGiIipFqjdZCJC3Td9CHKy7GZO
- TLSH T1C345AE49BFD04CB6E0BB5570CC22C660C2B37DDA4A21794F13E4266E1E3628869B5FF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_a45764f7ed2107e54f77486852cd1cd9_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_a45764f7ed2107e54f77486852cd1cd9_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 1.1MB
- SHA256 06417d6857a7b30897f028897477f86a20b1592dfc0d45622668cd23baea7848
- MD5 a45764f7ed2107e54f77486852cd1cd9
- SHA1 f68fb0223c64c69b002061e084d9c4745a7d4172
- SHA512 478cccb666cc21166e35efad8614c4f75b313ee7b2c6eb5ff958cf59dc49b1c916ecfc31f3d2e8a0b72ce81b5d35cfefc77bd2b2e829d86cebe5b28231ab0654
- SSDEEP 12288:HtCab5qvJvD65TGNJIi0hGFvhMe3cdTdcw5iFJCi4e7WRdTfgwCHKy7GLbbdIvWW:Aab5qvdGiIipFqjdZCJC3Td9CHKy7GZO
- TLSH T1C345AE49BFD04CB6E0BB5570CC22C660C2B37DDA4A21794F13E4266E1E3628869B5FF5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1