General
- Target 2026-11-03_62c5b746e31679e0bc2918f61596e57a_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_swisyn_vidar
- Size 403KB
- Sample261104-xhvmhstybx
- SHA256 2fc13825d00dfc20661655ea76f804ff7daf2e8e8935aea6499d4d801d39ca3f
- MD5 62c5b746e31679e0bc2918f61596e57a
- SHA1 4c6c1c697b9e8ba18d28932c310e9b3ac5554501
- SHA512 8b50fd202dd586c2213d07fc9b0dcebcd3a3bb2318ac74a80192b3de5ac136a3e44f1761bd3223681d6aced930ae31d9a892265074f82209153bb45cebcaa337
- SSDEEP 6144:UsLqdufVUNDaQGBjFymdDe9/rQE3qlxoOX1vYlU:PFUNDaflFympe9FqvFt
- TLSH T1C9945B227A4010A6D47281B14B7787E9BF3E7D220790DE4F13947B15AE3E243BA79727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_62c5b746e31679e0bc2918f61596e57a_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_62c5b746e31679e0bc2918f61596e57a_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_62c5b746e31679e0bc2918f61596e57a_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_swisyn_vidar
- Size 403KB
- SHA256 2fc13825d00dfc20661655ea76f804ff7daf2e8e8935aea6499d4d801d39ca3f
- MD5 62c5b746e31679e0bc2918f61596e57a
- SHA1 4c6c1c697b9e8ba18d28932c310e9b3ac5554501
- SHA512 8b50fd202dd586c2213d07fc9b0dcebcd3a3bb2318ac74a80192b3de5ac136a3e44f1761bd3223681d6aced930ae31d9a892265074f82209153bb45cebcaa337
- SSDEEP 6144:UsLqdufVUNDaQGBjFymdDe9/rQE3qlxoOX1vYlU:PFUNDaflFympe9FqvFt
- TLSH T1C9945B227A4010A6D47281B14B7787E9BF3E7D220790DE4F13947B15AE3E243BA79727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory