General
- Target 2026-11-10_aa64837f991dd8baa43a615115a508d2_cobalt-strike_elex_icedid_njrat_nymaim_rhadamanthys_smoke-loader_stealc_tofsee_vidar
- Size 9.6MB
- Sample261111-3gtaysswcs
- SHA256 be1eb958396d4a77b492d85f0eb26935a0d720b9e000120d1e089e6a541b40e1
- MD5 aa64837f991dd8baa43a615115a508d2
- SHA1 29c4a587f94ba42020b03906d35c6ffa414de80d
- SHA512 000536cbe23558101bdea16d5a7402c08bcfef7c43b6d593803cd57eced39cc04b5863bd0dd5a9c819d439d0d20587fdacf62309ee44cf922967aa3395c84183
- SSDEEP 98304:REN9EN1EN1ENmENmENUENmENmENmENmENmENmENmENmENmENaEN9EN1EN1ENmENf:alSg
- TLSH T136A66C15E2DCBCF6C056D071423596F2EA7AFC311661B58F8BA13F611E312E3F629229
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-10_aa64837f991dd8baa43a615115a508d2_cobalt-strike_elex_icedid_njrat_nymaim_rhadamanthys_smok.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-10_aa64837f991dd8baa43a615115a508d2_cobalt-strike_elex_icedid_njrat_nymaim_rhadamanthys_smoke-loader_stealc_tofsee_vidar
- Size 9.6MB
- SHA256 be1eb958396d4a77b492d85f0eb26935a0d720b9e000120d1e089e6a541b40e1
- MD5 aa64837f991dd8baa43a615115a508d2
- SHA1 29c4a587f94ba42020b03906d35c6ffa414de80d
- SHA512 000536cbe23558101bdea16d5a7402c08bcfef7c43b6d593803cd57eced39cc04b5863bd0dd5a9c819d439d0d20587fdacf62309ee44cf922967aa3395c84183
- SSDEEP 98304:REN9EN1EN1ENmENmENUENmENmENmENmENmENmENmENmENmENaEN9EN1EN1ENmENf:alSg
- TLSH T136A66C15E2DCBCF6C056D071423596F2EA7AFC311661B58F8BA13F611E312E3F629229
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Shodi worm
Executes dropped EXE
Drops file in System32 directory