General
- Target 2026-06-03_8351949ab4dba79503f5344f42acebb1_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 15.1MB
- Sample260603-twvmwsbx4w
- SHA256 b4b7539e9a63561b09461b4082480bf5cdf7bd9794ef0d12029089b54cba7dbc
- MD5 8351949ab4dba79503f5344f42acebb1
- SHA1 105c50601c0e9440fbf0e7af26b472d37c3b8ac8
- SHA512 1a321116f435c472877fee032628b5f2a65fb913f1790fdc17374474a016cdaa13ca8a0380440e8fff299045106b9b4ff543db8a3602047cf84652b63e5b12b6
- SSDEEP 49152:wabH/ELhtabH/MLhQ/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSq4vFL:mJ5WQtZ/K0tGOFWVRuLftCTxI1H
- TLSH T124F66C13F6E940A9E0AAD178DF358231AB327C594BF1A4DF324036D51E76AD07B38726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-03_8351949ab4dba79503f5344f42acebb1_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-03_8351949ab4dba79503f5344f42acebb1_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-03_8351949ab4dba79503f5344f42acebb1_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 15.1MB
- SHA256 b4b7539e9a63561b09461b4082480bf5cdf7bd9794ef0d12029089b54cba7dbc
- MD5 8351949ab4dba79503f5344f42acebb1
- SHA1 105c50601c0e9440fbf0e7af26b472d37c3b8ac8
- SHA512 1a321116f435c472877fee032628b5f2a65fb913f1790fdc17374474a016cdaa13ca8a0380440e8fff299045106b9b4ff543db8a3602047cf84652b63e5b12b6
- SSDEEP 49152:wabH/ELhtabH/MLhQ/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSq4vFL:mJ5WQtZ/K0tGOFWVRuLftCTxI1H
- TLSH T124F66C13F6E940A9E0AAD178DF358231AB327C594BF1A4DF324036D51E76AD07B38726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1