General
- Target 2026-07-02_52c40d88bee510f6eeb0b3aca21a0f8f_cobalt-strike_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 3.2MB
- Sample260702-wafb7af17m
- SHA256 04343b69555ad23e674bd857e912807345fb39901ce73b78d9e547b921ea9807
- MD5 52c40d88bee510f6eeb0b3aca21a0f8f
- SHA1 82d43ad8dd72a0e4904a5eacd812fa2ed9c31cb8
- SHA512 100831d7c2970dfcbe6e07b01a8d70aa9afdfbcadbb558184eae42cb023066ab60d2ffa122e764517875e6723f678e9cf7ea207f260f46305c20706618f2b027
- SSDEEP 49152:PabH/xIyNabH/HLYXdturNp5jabH/xIyNabH/HLYXdturNp5e:aIyaLgH6d+IyaLgH6de
- TLSH T134F518A2650156BEF400EE73923B771578603EA91F909A4FD64CBB292D346F22FB43C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_52c40d88bee510f6eeb0b3aca21a0f8f_cobalt-strike_elex_hijackloader_redline-stealer_rhadaman.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_52c40d88bee510f6eeb0b3aca21a0f8f_cobalt-strike_elex_hijackloader_redline-stealer_rhadaman.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_52c40d88bee510f6eeb0b3aca21a0f8f_cobalt-strike_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 3.2MB
- SHA256 04343b69555ad23e674bd857e912807345fb39901ce73b78d9e547b921ea9807
- MD5 52c40d88bee510f6eeb0b3aca21a0f8f
- SHA1 82d43ad8dd72a0e4904a5eacd812fa2ed9c31cb8
- SHA512 100831d7c2970dfcbe6e07b01a8d70aa9afdfbcadbb558184eae42cb023066ab60d2ffa122e764517875e6723f678e9cf7ea207f260f46305c20706618f2b027
- SSDEEP 49152:PabH/xIyNabH/HLYXdturNp5jabH/xIyNabH/HLYXdturNp5e:aIyaLgH6d+IyaLgH6de
- TLSH T134F518A2650156BEF400EE73923B771578603EA91F909A4FD64CBB292D346F22FB43C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1