General
- Target 2026-07-02_a0784937369d315fa74c44a8fd775401_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 1.7MB
- Sample260702-vgfe4aas7t
- SHA256 72f7d9f1d07bad472a9c511b3194c7f025035bd48f440c5048fdc118a0618377
- MD5 a0784937369d315fa74c44a8fd775401
- SHA1 d888a892e24b21644336777f4611426ed69c99db
- SHA512 0ce4053a76b9081c5ece5d637b3d4a17285a9d8925c1ab6f61b08d5ae8002a90ba7fa56896308c91373b5bd08b56eba794157bec6a7c766ebbb9d3acdfdc133b
- SSDEEP 24576:P4R5CIH/7aIyN4R5CIH/7TLcydWXkj0uOrturgYp5xI1H:PabH/OIyNabH/HLYXdturNp5xI1H
- TLSH T1F38528A2650155BEF500EE33923B776178603FA91F909A4FD64CBB292D346F22FB4385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_a0784937369d315fa74c44a8fd775401_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_a0784937369d315fa74c44a8fd775401_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_a0784937369d315fa74c44a8fd775401_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 1.7MB
- SHA256 72f7d9f1d07bad472a9c511b3194c7f025035bd48f440c5048fdc118a0618377
- MD5 a0784937369d315fa74c44a8fd775401
- SHA1 d888a892e24b21644336777f4611426ed69c99db
- SHA512 0ce4053a76b9081c5ece5d637b3d4a17285a9d8925c1ab6f61b08d5ae8002a90ba7fa56896308c91373b5bd08b56eba794157bec6a7c766ebbb9d3acdfdc133b
- SSDEEP 24576:P4R5CIH/7aIyN4R5CIH/7TLcydWXkj0uOrturgYp5xI1H:PabH/OIyNabH/HLYXdturNp5xI1H
- TLSH T1F38528A2650155BEF500EE33923B776178603FA91F909A4FD64CBB292D346F22FB4385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1