General
- Target 2026-07-02_b396ccb293b5e3ac68b82f7bc6aeff65_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 6.2MB
- Sample260702-yfmpkadv6v
- SHA256 fb55da041b81167db0feb7cdd56b526b06eb4e80648f1a66497e0cd09b443e35
- MD5 b396ccb293b5e3ac68b82f7bc6aeff65
- SHA1 b10ff30602f14739f8895838ced6f7a6cb700b98
- SHA512 0f1fadb9fccaf0f0c1bbf810f251c84358cd30cf4ece88fd3f3206593a78a486df48f860f2c45555db862da32f39d28577e19f5e4ec5dea4d6f8974e5cefb430
- SSDEEP 98304:87IwX7IwCrM0oAaldmdmnpS0oAaldmdmnpQI1H:3rpKmd0BKmd0dH
- TLSH T12B664813A29548E9D15AC074CE46C232EB227C5D47F2A5EF36807AD63E73AD03B3A715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_b396ccb293b5e3ac68b82f7bc6aeff65_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_b396ccb293b5e3ac68b82f7bc6aeff65_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_b396ccb293b5e3ac68b82f7bc6aeff65_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 6.2MB
- SHA256 fb55da041b81167db0feb7cdd56b526b06eb4e80648f1a66497e0cd09b443e35
- MD5 b396ccb293b5e3ac68b82f7bc6aeff65
- SHA1 b10ff30602f14739f8895838ced6f7a6cb700b98
- SHA512 0f1fadb9fccaf0f0c1bbf810f251c84358cd30cf4ece88fd3f3206593a78a486df48f860f2c45555db862da32f39d28577e19f5e4ec5dea4d6f8974e5cefb430
- SSDEEP 98304:87IwX7IwCrM0oAaldmdmnpS0oAaldmdmnpQI1H:3rpKmd0BKmd0dH
- TLSH T12B664813A29548E9D15AC074CE46C232EB227C5D47F2A5EF36807AD63E73AD03B3A715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1