General
- Target 2026-07-05_a2899cee177fd0b06aed76a5feddefe0_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 770KB
- Sample260705-tfe79shs9q
- SHA256 ea54458683cc37a6a0bf131a1a1312ee34b84bd290e0bc70bf637bc5e935066c
- MD5 a2899cee177fd0b06aed76a5feddefe0
- SHA1 c9d069a776d58702d220e2583b6f63e71e392595
- SHA512 5fc0436905e1623c3534b93bfbb7c69ec45d9b6f0e2fd7d589630e1195231b6621f7be621834ffd482da7ff0b484d7ec2dd1029c81b48cd7fa43738631c13dab
- SSDEEP 12288:w4Ryed8I7r/7mCn6bi9I6SncQiHmNJLB9unmoIhnSv6bi9I6SH:w4R5CIH/73I1niGnB9umZnSPI1H
- TLSH T1C4F49D2266C09476EA5351349975E162B9353D310B90D9CBA3D0B72D2E333C3BBB972B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_a2899cee177fd0b06aed76a5feddefe0_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_a2899cee177fd0b06aed76a5feddefe0_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_a2899cee177fd0b06aed76a5feddefe0_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 770KB
- SHA256 ea54458683cc37a6a0bf131a1a1312ee34b84bd290e0bc70bf637bc5e935066c
- MD5 a2899cee177fd0b06aed76a5feddefe0
- SHA1 c9d069a776d58702d220e2583b6f63e71e392595
- SHA512 5fc0436905e1623c3534b93bfbb7c69ec45d9b6f0e2fd7d589630e1195231b6621f7be621834ffd482da7ff0b484d7ec2dd1029c81b48cd7fa43738631c13dab
- SSDEEP 12288:w4Ryed8I7r/7mCn6bi9I6SncQiHmNJLB9unmoIhnSv6bi9I6SH:w4R5CIH/73I1niGnB9umZnSPI1H
- TLSH T1C4F49D2266C09476EA5351349975E162B9353D310B90D9CBA3D0B72D2E333C3BBB972B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1