General
- Target 2026-05-29_5acab1c4f48882ce3f8b2bf364ce0276_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar
- Size 9.7MB
- Sample260529-djsd1abv7p
- SHA256 db2beb73759b3105afdcae037151278e091f7246997fb4f1a67bb6ad44f5aa70
- MD5 5acab1c4f48882ce3f8b2bf364ce0276
- SHA1 f0f853fc68338e8f56ca4b02d5c7a622ccec4e9e
- SHA512 3b05e1d166ba37a9facc3bf3c9b62ed064f57eef48023405352bb314718a48b1aec7e7b9a14c72bf3bf142590f8b4b7d7661d56ce852ad51c6c8aee5112c3f41
- SSDEEP 98304:aCuChCuC3WQtZ/K0tGOFWVRuLftCTtLapI9:frkr3WyZ/K0ttYVAATtcI9
- TLSH T194A63A23B1910079F459D936CF16B328AA617C598BF299DFA2443ADC2FB25F03B34365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_5acab1c4f48882ce3f8b2bf364ce0276_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_5acab1c4f48882ce3f8b2bf364ce0276_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_5acab1c4f48882ce3f8b2bf364ce0276_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar
- Size 9.7MB
- SHA256 db2beb73759b3105afdcae037151278e091f7246997fb4f1a67bb6ad44f5aa70
- MD5 5acab1c4f48882ce3f8b2bf364ce0276
- SHA1 f0f853fc68338e8f56ca4b02d5c7a622ccec4e9e
- SHA512 3b05e1d166ba37a9facc3bf3c9b62ed064f57eef48023405352bb314718a48b1aec7e7b9a14c72bf3bf142590f8b4b7d7661d56ce852ad51c6c8aee5112c3f41
- SSDEEP 98304:aCuChCuC3WQtZ/K0tGOFWVRuLftCTtLapI9:frkr3WyZ/K0ttYVAATtcI9
- TLSH T194A63A23B1910079F459D936CF16B328AA617C598BF299DFA2443ADC2FB25F03B34365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1