General
- Target 2026-06-05_217ccb61ac0b7c1543d60e2d7a9952dd_elex_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 1.5MB
- Sample260605-r5raqabt4j
- SHA256 a0f7af1feb7cfbe71edc6cbf3d821d30f76e6bd6d60f5ec22fa0b49046a61cbf
- MD5 217ccb61ac0b7c1543d60e2d7a9952dd
- SHA1 655538e38e6bb6549008a6dbf2c05a3800fa71ce
- SHA512 6c9f15378e1416225fc79af0674bba5182228b49697f0d625eddfda1f8634fe860de5b3ba80692c250d1ee269a4adfc8c994fd306938e45e842681c7af721b27
- SSDEEP 24576:P4R5CIH/7VDPjHg9PnNUcQT4R5CIH/7VDPjHg9PnNUcQhI1H:PabH/5PjH+PITabH/5PjH+PIhI1H
- TLSH T18C755B61F7D450A9F1B38A309C358512E9367C750BA0DE8F6394361A2E337D2A978F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-05_217ccb61ac0b7c1543d60e2d7a9952dd_elex_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-05_217ccb61ac0b7c1543d60e2d7a9952dd_elex_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-05_217ccb61ac0b7c1543d60e2d7a9952dd_elex_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 1.5MB
- SHA256 a0f7af1feb7cfbe71edc6cbf3d821d30f76e6bd6d60f5ec22fa0b49046a61cbf
- MD5 217ccb61ac0b7c1543d60e2d7a9952dd
- SHA1 655538e38e6bb6549008a6dbf2c05a3800fa71ce
- SHA512 6c9f15378e1416225fc79af0674bba5182228b49697f0d625eddfda1f8634fe860de5b3ba80692c250d1ee269a4adfc8c994fd306938e45e842681c7af721b27
- SSDEEP 24576:P4R5CIH/7VDPjHg9PnNUcQT4R5CIH/7VDPjHg9PnNUcQhI1H:PabH/5PjH+PITabH/5PjH+PIhI1H
- TLSH T18C755B61F7D450A9F1B38A309C358512E9367C750BA0DE8F6394361A2E337D2A978F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1