General
- Target 2026-11-01_c01461b43504107100448763b8ea5c1a_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn_vidar
- Size 352KB
- Sample261102-lvm8esvs4l
- SHA256 4768e8a101c7f4a79fae2fa8439099c36bc29992651ce20bf6859dd7f83e0f9d
- MD5 c01461b43504107100448763b8ea5c1a
- SHA1 fc86227484678ed52777953d963a1b7e3baf0b5a
- SHA512 ea320b01cddcb074f0f44ba9e6182a8a5a61c501c83b593193f5d48ceaac6ddd701d5527f4784d85ea68ae8278d8664d58297a82d250d8f48aa3efb08171d1ee
- SSDEEP 6144:UsLqdufVUNDayvudZJp30u31EwZGIMs2Qpra2WH+cFIlXsRqL:PFUNDayvudzp3hlVZGIMr+cFWQqL
- TLSH T1E2749D137E5020ADE536C6F09CA0965AB7327D310B60FE4B23A5A7152E73183BEB6717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_c01461b43504107100448763b8ea5c1a_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_c01461b43504107100448763b8ea5c1a_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_c01461b43504107100448763b8ea5c1a_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn_vidar
- Size 352KB
- SHA256 4768e8a101c7f4a79fae2fa8439099c36bc29992651ce20bf6859dd7f83e0f9d
- MD5 c01461b43504107100448763b8ea5c1a
- SHA1 fc86227484678ed52777953d963a1b7e3baf0b5a
- SHA512 ea320b01cddcb074f0f44ba9e6182a8a5a61c501c83b593193f5d48ceaac6ddd701d5527f4784d85ea68ae8278d8664d58297a82d250d8f48aa3efb08171d1ee
- SSDEEP 6144:UsLqdufVUNDayvudZJp30u31EwZGIMs2Qpra2WH+cFIlXsRqL:PFUNDayvudzp3hlVZGIMr+cFWQqL
- TLSH T1E2749D137E5020ADE536C6F09CA0965AB7327D310B60FE4B23A5A7152E73183BEB6717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory