General
- Target 2026-06-02_90cbe5301984e3217768fe7544b85d32_cobalt-strike_elex_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 917KB
- Sample260602-ee1egsew8q
- SHA256 60aae65bb30dc12c462834649b13e640de5357399d2cf004901485a1c2cacb0c
- MD5 90cbe5301984e3217768fe7544b85d32
- SHA1 a593b61125d1641f2beae4998e77480bf888c666
- SHA512 610442daaddba0e51bbe40d506fa374b68987145722ae529af6ca8bd8b051db57622f0469b921e3426367360ecd961394293516e632970769a52cae3dd006524
- SSDEEP 24576:w4R5CIH/7D4R5CIH/7vI15x20GNcydWXkrm3NCdBTNsk:wabH/fabH/DI1X4YXZ3NCLT7
- TLSH T18B157C21B79084A9F4738575A8648512EA367D710B90DE4FB380771A2E337E3BDB4B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_90cbe5301984e3217768fe7544b85d32_cobalt-strike_elex_icedid_njrat_redline-stealer_rhadaman.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_90cbe5301984e3217768fe7544b85d32_cobalt-strike_elex_icedid_njrat_redline-stealer_rhadaman.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_90cbe5301984e3217768fe7544b85d32_cobalt-strike_elex_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 917KB
- SHA256 60aae65bb30dc12c462834649b13e640de5357399d2cf004901485a1c2cacb0c
- MD5 90cbe5301984e3217768fe7544b85d32
- SHA1 a593b61125d1641f2beae4998e77480bf888c666
- SHA512 610442daaddba0e51bbe40d506fa374b68987145722ae529af6ca8bd8b051db57622f0469b921e3426367360ecd961394293516e632970769a52cae3dd006524
- SSDEEP 24576:w4R5CIH/7D4R5CIH/7vI15x20GNcydWXkrm3NCdBTNsk:wabH/fabH/DI1X4YXZ3NCLT7
- TLSH T18B157C21B79084A9F4738575A8648512EA367D710B90DE4FB380771A2E337E3BDB4B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Grants admin privileges
Uses net.exe to modify the user's privileges.
Disables service(s)
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1