Analysis
- max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
19/04/2026, 12:12
General
- Target 2026-04-19_4af90ec7bd9653bc0f887862da01d773_cobalt-strike_elex_hijackloader_rhadamanthys_smoke-loader_vidar.exe
- Size 1.8MB
- Sample260419-pdhs6aex3s
- SHA256 1d9882ff9185d0f9452642e8737a3d79fd69f00de94e489392ba6c2d7ec9dc48
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-04-19_4af90ec7bd9653bc0f887862da01d773_cobalt-strike_elex_hijackloader_rhadamanthys_smoke-loader_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-04-19_4af90ec7bd9653bc0f887862da01d773_cobalt-strike_elex_hijackloader_rhadamanthys_smoke-loader_vidar.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4984-0-0x00007FF984285000-0x00007FF984286000-memory.dmp
memory/4984-1-0x00000000010F0000-0x0000000001110000-memory.dmp
memory/4984-2-0x00007FF983FD0000-0x00007FF984971000-memory.dmp
memory/4984-3-0x000000001BE90000-0x000000001C44A000-memory.dmp
memory/4984-4-0x000000001B750000-0x000000001B76E000-memory.dmp
memory/4984-5-0x00007FF983FD0000-0x00007FF984971000-memory.dmp
memory/4984-7-0x00007FF983FD0000-0x00007FF984971000-memory.dmp
memory/4984-8-0x000000001D040000-0x000000001D0DC000-memory.dmp
memory/4984-6-0x000000001CAD0000-0x000000001CF9E000-memory.dmp
memory/4984-9-0x00007FF983FD0000-0x00007FF984971000-memory.dmp
memory/4984-10-0x00007FF983FD0000-0x00007FF984971000-memory.dmp
memory/4984-12-0x0000000000F80000-0x0000000000F8C000-memory.dmp
memory/4984-13-0x00007FF983FD0000-0x00007FF984971000-memory.dmp