General
- Target 2026-05-29_83b9008e79be98a48bd2278132bb5fdd_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 2.5MB
- Sample260529-ejhegacv4n
- SHA256 752f4681073db784af1fd9f1a53321d4593f414400eb60f8e5435d5cabc3ca38
- MD5 83b9008e79be98a48bd2278132bb5fdd
- SHA1 1a5d76d5d956f1bf19f963a0173ce0f68fab876c
- SHA512 68afe6c5d35f20d05c5e37c7da60229c7d811264fd10cb265dc63bf820b575277e8c83dcdefed26acc4823ef34932c43c58d20f1ff1df174ba7ebe2d8c563f9c
- SSDEEP 49152:wabH/dVI1KRJ8YXIabH/NVI1KRJ8YXv/7t0i0FZaUm8cikL6:FI1KRqgtI1KRqgXnUm8UO
- TLSH T1E7C58D13B79440E9E06BC1749A558262FA767C610B70AECF1390B3192F33BD1AF79B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_83b9008e79be98a48bd2278132bb5fdd_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_83b9008e79be98a48bd2278132bb5fdd_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_83b9008e79be98a48bd2278132bb5fdd_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 2.5MB
- SHA256 752f4681073db784af1fd9f1a53321d4593f414400eb60f8e5435d5cabc3ca38
- MD5 83b9008e79be98a48bd2278132bb5fdd
- SHA1 1a5d76d5d956f1bf19f963a0173ce0f68fab876c
- SHA512 68afe6c5d35f20d05c5e37c7da60229c7d811264fd10cb265dc63bf820b575277e8c83dcdefed26acc4823ef34932c43c58d20f1ff1df174ba7ebe2d8c563f9c
- SSDEEP 49152:wabH/dVI1KRJ8YXIabH/NVI1KRJ8YXv/7t0i0FZaUm8cikL6:FI1KRqgtI1KRqgXnUm8UO
- TLSH T1E7C58D13B79440E9E06BC1749A558262FA767C610B70AECF1390B3192F33BD1AF79B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Grants admin privileges
Uses net.exe to modify the user's privileges.
Disables service(s)
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1