General
- Target 2026-07-05_030f047102676e6993569981a4ddcc0c_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 1.0MB
- Sample260705-vwsc7sev3t
- SHA256 8297c442e60488d4b13aa2f4e7008785c98d8ee6637c41b7be2f55efc5610162
- MD5 030f047102676e6993569981a4ddcc0c
- SHA1 dd4c3748a7ce5bfb99aeab55611766e71dbdc6b9
- SHA512 f14de87099b27dfb1135ffdb235b4b37de5e125492ce217e378ea6137eef5b39f9f2a8a07090efb76e3cf9d81ee8e38bb6ccfc952fe5f9897f62e6a9d8cd249e
- SSDEEP 24576:w4R5CIH/7AI1niGnB9umZnAiGnB9um2z3:wabH/MI1Ffu6UfuD
- TLSH T12F354A25668044B5E86255348961A11EA6213C21CB93DDCB63D07EEDFFF32C2AF79336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_030f047102676e6993569981a4ddcc0c_elex_hijackloader_icedid_njrat_redline-stealer_rhadamant.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_030f047102676e6993569981a4ddcc0c_elex_hijackloader_icedid_njrat_redline-stealer_rhadamant.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_030f047102676e6993569981a4ddcc0c_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 1.0MB
- SHA256 8297c442e60488d4b13aa2f4e7008785c98d8ee6637c41b7be2f55efc5610162
- MD5 030f047102676e6993569981a4ddcc0c
- SHA1 dd4c3748a7ce5bfb99aeab55611766e71dbdc6b9
- SHA512 f14de87099b27dfb1135ffdb235b4b37de5e125492ce217e378ea6137eef5b39f9f2a8a07090efb76e3cf9d81ee8e38bb6ccfc952fe5f9897f62e6a9d8cd249e
- SSDEEP 24576:w4R5CIH/7AI1niGnB9umZnAiGnB9um2z3:wabH/MI1Ffu6UfuD
- TLSH T12F354A25668044B5E86255348961A11EA6213C21CB93DDCB63D07EEDFFF32C2AF79336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1