General
- Target 2026-06-29_1efe654e82b4c36183c1576daed16be4_cloudeye_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_tofsee
- Size 3.1MB
- Sample260630-pc8m7aev4t
- SHA256 147e530fa9a5b0b8d601a5055e89c2960597a485c72c4fc2c8c756a7d06f9ea2
- MD5 1efe654e82b4c36183c1576daed16be4
- SHA1 8029480c8a19bf1bcdfa29f955b8d56327b47a04
- SHA512 233e8efc24c268a1cf00b7552e652841a7a7a14a3425bbf27e320a007e2e32d73d687f8da4096d83916bda44160630a15e6b45ae707fc1931b2c56dd2b4aca92
- SSDEEP 12288:w4Ryed8I7r/7mkUMTzUjD5VC9oU5DO69J6bi9I6SH:w4R5CIH/7pTa+p9I1H
- TLSH T145E54A12AB90E426F6A246307879D7626E397E750AC09D0BB780B75D28727D3F5B430F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_1efe654e82b4c36183c1576daed16be4_cloudeye_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_1efe654e82b4c36183c1576daed16be4_cloudeye_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_tofsee.exe
Resource
win11ltsc2024-20260630-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_1efe654e82b4c36183c1576daed16be4_cloudeye_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_tofsee
- Size 3.1MB
- SHA256 147e530fa9a5b0b8d601a5055e89c2960597a485c72c4fc2c8c756a7d06f9ea2
- MD5 1efe654e82b4c36183c1576daed16be4
- SHA1 8029480c8a19bf1bcdfa29f955b8d56327b47a04
- SHA512 233e8efc24c268a1cf00b7552e652841a7a7a14a3425bbf27e320a007e2e32d73d687f8da4096d83916bda44160630a15e6b45ae707fc1931b2c56dd2b4aca92
- SSDEEP 12288:w4Ryed8I7r/7mkUMTzUjD5VC9oU5DO69J6bi9I6SH:w4R5CIH/7pTa+p9I1H
- TLSH T145E54A12AB90E426F6A246307879D7626E397E750AC09D0BB780B75D28727D3F5B430F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1