General
- Target 2026-06-28_dc6c88fc229715e1df40f9b3a04e88a9_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar
- Size 8.0MB
- Sample260628-w88rdscs3m
- SHA256 28520e74511703b35759a00d68316c2f7d61d4241a30f6c3eb9e51d97666b318
- MD5 dc6c88fc229715e1df40f9b3a04e88a9
- SHA1 cdc42634a76d4b1c7f9d078b421f8dcccee8b5c4
- SHA512 43157fbf69c1d9bb6a111f9bb83f571d29c49b4acd1e23890c98791f4336ed9ab4097828fc304adf75ccf211a85a8dbdb3ad863efaca81892ee8001ae2896388
- SSDEEP 98304:3r0oAaldmdmnpFWQtZ/K0tGOFWVRuLftCTg0:34Kmd0vWyZ/K0ttYVAATg0
- TLSH T117864B13F69540B9E05AD174CE2582359B227C5987F269EF32807AD93FB3AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_dc6c88fc229715e1df40f9b3a04e88a9_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_dc6c88fc229715e1df40f9b3a04e88a9_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar.exe
Resource
win11ltsc2024-20260617-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_dc6c88fc229715e1df40f9b3a04e88a9_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar
- Size 8.0MB
- SHA256 28520e74511703b35759a00d68316c2f7d61d4241a30f6c3eb9e51d97666b318
- MD5 dc6c88fc229715e1df40f9b3a04e88a9
- SHA1 cdc42634a76d4b1c7f9d078b421f8dcccee8b5c4
- SHA512 43157fbf69c1d9bb6a111f9bb83f571d29c49b4acd1e23890c98791f4336ed9ab4097828fc304adf75ccf211a85a8dbdb3ad863efaca81892ee8001ae2896388
- SSDEEP 98304:3r0oAaldmdmnpFWQtZ/K0tGOFWVRuLftCTg0:34Kmd0vWyZ/K0ttYVAATg0
- TLSH T117864B13F69540B9E05AD174CE2582359B227C5987F269EF32807AD93FB3AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1