General
- Target 2026-07-06_53405614ba00c8db1ac957739c6a8f75_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 735KB
- Sample260706-1e88aahs5r
- SHA256 7e0b49f7750c446ff1196c39c75255fabb40602bb893eb9647021db723ccb7ca
- MD5 53405614ba00c8db1ac957739c6a8f75
- SHA1 fb4c687441ef917b9717ce0124e8174c13a23fe8
- SHA512 b1ce6f6fb5b7e94ac488396c3929d1c21cb9c1bc2a6d42dc9acaa1bf7b1b3e0f85c9e8ee8cb3b394d7b8f310ab2c4592bdcbffeb7fcea08f02574a9c5c716962
- SSDEEP 12288:w4Ryed8I7r/7mpUn6bi9I6SncQiHmNJLB9unmoIhn0IhZyXcmhcW:w4R5CIH/7rI1niGnB9umZnl0LhcW
- TLSH T103F47C26A78054A5ED62A1349875A112A9313D310F90D9CBA3D1B72D2F333D3BB7973B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_53405614ba00c8db1ac957739c6a8f75_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_53405614ba00c8db1ac957739c6a8f75_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_53405614ba00c8db1ac957739c6a8f75_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 735KB
- SHA256 7e0b49f7750c446ff1196c39c75255fabb40602bb893eb9647021db723ccb7ca
- MD5 53405614ba00c8db1ac957739c6a8f75
- SHA1 fb4c687441ef917b9717ce0124e8174c13a23fe8
- SHA512 b1ce6f6fb5b7e94ac488396c3929d1c21cb9c1bc2a6d42dc9acaa1bf7b1b3e0f85c9e8ee8cb3b394d7b8f310ab2c4592bdcbffeb7fcea08f02574a9c5c716962
- SSDEEP 12288:w4Ryed8I7r/7mpUn6bi9I6SncQiHmNJLB9unmoIhn0IhZyXcmhcW:w4R5CIH/7rI1niGnB9umZnl0LhcW
- TLSH T103F47C26A78054A5ED62A1349875A112A9313D310F90D9CBA3D1B72D2F333D3BB7973B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory