General

  • Target
    2026-07-02_52c40d88bee510f6eeb0b3aca21a0f8f_cobalt-strike_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
  • Size 3.2MB
  • Sample260702-wafb7af17m
  • SHA256 04343b69555ad23e674bd857e912807345fb39901ce73b78d9e547b921ea9807
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-02_52c40d88bee510f6eeb0b3aca21a0f8f_cobalt-strike_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
    • Size 3.2MB
    • SHA256 04343b69555ad23e674bd857e912807345fb39901ce73b78d9e547b921ea9807
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Disables service(s)

    • Executes dropped EXE

    • Network Share Discovery

      Attempt to gather information on host network.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks