General
- Target 2026-05-06_cd9fb68ec18bd08d5413c90d86b49e8b_akira_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_remcos_rhadamanthys_vidar
- Size 6.8MB
- Sample260506-kyk2ssh14q
- SHA256 280902c4d4dc9ff0f2a597d6d2a5be0d43ed4b897a0e6161afb2302ae5128055
- MD5 cd9fb68ec18bd08d5413c90d86b49e8b
- SHA1 31f70d3ffd3d944f388d3e45ceaea99983740a7c
- SHA512 7818c3aac6bd90c4104aa605da6f134e961f8dc15463623b4960c5ac992d9817562932c173b833af575685119fba087fae8e23945c926c2cf0f21436561dad0a
- SSDEEP 49152:wabH/YYfkpabH/fYfkxPv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvR:nWuKUgTH2M2m9UMpu1QfLczqssnKSk
- TLSH T13476D51221999FECC05F9434CE0665A966237C458F22AFDF19807E693FB56B06F3422F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-06_cd9fb68ec18bd08d5413c90d86b49e8b_akira_cobalt-strike_elex_hijackloader_icedid_njrat_redli.exe
Resource
win10v2004-20260130-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_cd9fb68ec18bd08d5413c90d86b49e8b_akira_cobalt-strike_elex_hijackloader_icedid_njrat_redli.exe
Resource
win11-20260130-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_cd9fb68ec18bd08d5413c90d86b49e8b_akira_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_remcos_rhadamanthys_vidar
- Size 6.8MB
- SHA256 280902c4d4dc9ff0f2a597d6d2a5be0d43ed4b897a0e6161afb2302ae5128055
- MD5 cd9fb68ec18bd08d5413c90d86b49e8b
- SHA1 31f70d3ffd3d944f388d3e45ceaea99983740a7c
- SHA512 7818c3aac6bd90c4104aa605da6f134e961f8dc15463623b4960c5ac992d9817562932c173b833af575685119fba087fae8e23945c926c2cf0f21436561dad0a
- SSDEEP 49152:wabH/YYfkpabH/fYfkxPv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvR:nWuKUgTH2M2m9UMpu1QfLczqssnKSk
- TLSH T13476D51221999FECC05F9434CE0665A966237C458F22AFDF19807E693FB56B06F3422F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1