General
- Target 2026-11-10_f50d9a969197d07d3e649e3d15eafd0d_cobalt-strike_coinminer_elex_icedid_njrat_xloader
- Size 712KB
- Sample261110-e85w3ayzf1
- SHA256 10711571bf77add98397191b63b0c49c4dc13237b9390ba94d4a933b964781b1
- MD5 f50d9a969197d07d3e649e3d15eafd0d
- SHA1 04472b4a7a0013d8b1a5fdb5536392f011d165c3
- SHA512 036e123c2215598db36f495f633320ad724e827862381abcb725232c9edd08d8c3274c4f4f0ab03c7c7f05dfabc466897c1a65e927dd2f9f7c0d972c5fedab65
- SSDEEP 12288:56Wq4aaE6KwyF5L0Y2D1PqLb6Wq44er5+nZo6aE6KwyF5L0Y2D1PqL/:PthEVaPqLBt0kEVaPqL/
- TLSH T1F9F4015E77A9A8D2DC740F30AC714281867178A3AF715A7B24D4630F5C6B1B89E26F38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-10_f50d9a969197d07d3e649e3d15eafd0d_cobalt-strike_coinminer_elex_icedid_njrat_xloader.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-10_f50d9a969197d07d3e649e3d15eafd0d_cobalt-strike_coinminer_elex_icedid_njrat_xloader.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-10_f50d9a969197d07d3e649e3d15eafd0d_cobalt-strike_coinminer_elex_icedid_njrat_xloader
- Size 712KB
- SHA256 10711571bf77add98397191b63b0c49c4dc13237b9390ba94d4a933b964781b1
- MD5 f50d9a969197d07d3e649e3d15eafd0d
- SHA1 04472b4a7a0013d8b1a5fdb5536392f011d165c3
- SHA512 036e123c2215598db36f495f633320ad724e827862381abcb725232c9edd08d8c3274c4f4f0ab03c7c7f05dfabc466897c1a65e927dd2f9f7c0d972c5fedab65
- SSDEEP 12288:56Wq4aaE6KwyF5L0Y2D1PqLb6Wq44er5+nZo6aE6KwyF5L0Y2D1PqL/:PthEVaPqLBt0kEVaPqL/
- TLSH T1F9F4015E77A9A8D2DC740F30AC714281867178A3AF715A7B24D4630F5C6B1B89E26F38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies visibility of file extensions in Explorer
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
AutoIT Executable
AutoIT scripts compiled to PE executables.