General
- Target 2026-04-18_89adeb3ac951bd4c67976d0c28d470cc_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 938KB
- Sample260418-q2lemabs4p
- SHA256 e18220de3e9a51e8ade5b686774808d7c96c46867edadb1b1d6de865d12082c7
- MD5 89adeb3ac951bd4c67976d0c28d470cc
- SHA1 f0a8e045879e01a8f200e94cbba7ae580cbc2e5f
- SHA512 3c69c33c5a3c8a27a0fba985ac0cc30c1404b1b48201d67e69140030644d4de8a132f01c55fbd9d3bc9c763c9076b5d874a80769017cc8cb1a1ec88d8e7ec3d3
- SSDEEP 12288:P4Ryed8I7r/7mFUd6bi9I6SncQiHmNJLB9unmOf3wAghhebcj:P4R5CIH/7RI1niGnB9umuqhhee
- TLSH T1E81539622241956AF914AE77C75AB324B8303EA50FD0C68FD70D371D1A362F16FB6389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-18_89adeb3ac951bd4c67976d0c28d470cc_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-18_89adeb3ac951bd4c67976d0c28d470cc_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_89adeb3ac951bd4c67976d0c28d470cc_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 938KB
- SHA256 e18220de3e9a51e8ade5b686774808d7c96c46867edadb1b1d6de865d12082c7
- MD5 89adeb3ac951bd4c67976d0c28d470cc
- SHA1 f0a8e045879e01a8f200e94cbba7ae580cbc2e5f
- SHA512 3c69c33c5a3c8a27a0fba985ac0cc30c1404b1b48201d67e69140030644d4de8a132f01c55fbd9d3bc9c763c9076b5d874a80769017cc8cb1a1ec88d8e7ec3d3
- SSDEEP 12288:P4Ryed8I7r/7mFUd6bi9I6SncQiHmNJLB9unmOf3wAghhebcj:P4R5CIH/7RI1niGnB9umuqhhee
- TLSH T1E81539622241956AF914AE77C75AB324B8303EA50FD0C68FD70D371D1A362F16FB6389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory