General
- Target 2026-05-04_d1feaaa908761e861673b495cd6f40d6_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 4.9MB
- Sample260504-thrdbabt2n
- SHA256 e9af1bcf6b00eaa172b9fe54b2576f1a97db4efadec57bcc7dfe182be62e4188
- MD5 d1feaaa908761e861673b495cd6f40d6
- SHA1 189ef04c1e2a492e0de32ff5a3e8542950ef7b52
- SHA512 999352db67c198d34c0ad15fe228ebec953effd986515913b9753e631ab153087a4066654102b4a3abc85fc628e8887f1138f46564897de781b576ba03dd82b6
- SSDEEP 12288:w4Ryed8I7r/7mqecnhzd5qcQiHmNJLB9unm96bi9I6SH:w4R5CIH/79Lzd50iGnB9umJI1H
- TLSH T16A367D23674454BAED97C13899619122E9317C3507A0E9CF63C07B262E337D2BB79B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-04_d1feaaa908761e861673b495cd6f40d6_elex_hijackloader_icedid_njrat_redline-stealer_rhadamant.exe
Resource
win10v2004-20260130-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_d1feaaa908761e861673b495cd6f40d6_elex_hijackloader_icedid_njrat_redline-stealer_rhadamant.exe
Resource
win11-20260130-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_d1feaaa908761e861673b495cd6f40d6_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 4.9MB
- SHA256 e9af1bcf6b00eaa172b9fe54b2576f1a97db4efadec57bcc7dfe182be62e4188
- MD5 d1feaaa908761e861673b495cd6f40d6
- SHA1 189ef04c1e2a492e0de32ff5a3e8542950ef7b52
- SHA512 999352db67c198d34c0ad15fe228ebec953effd986515913b9753e631ab153087a4066654102b4a3abc85fc628e8887f1138f46564897de781b576ba03dd82b6
- SSDEEP 12288:w4Ryed8I7r/7mqecnhzd5qcQiHmNJLB9unm96bi9I6SH:w4R5CIH/79Lzd50iGnB9umJI1H
- TLSH T16A367D23674454BAED97C13899619122E9317C3507A0E9CF63C07B262E337D2BB79B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1