General
- Target 2026-07-10_af0b1c98fa5526a3b53d826e176405f1_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 1.2MB
- Sample260710-tlfe8acw9m
- SHA256 4a883aa88892b717002922eb5bf9f284c8b46b8fdae8e899e31eb2e82f71d68e
- MD5 af0b1c98fa5526a3b53d826e176405f1
- SHA1 4b2805d32f3d6d008c94ebc7fa37faadab6bc83c
- SHA512 486f30c4c9089f630caee8c7a6ed02ad82c4f1d768a13a18018d834f0cc90e3ef15422b688eaddadc3931d3d668f3d26689c8fa67318d2ca93787c4871fd963f
- SSDEEP 24576:w4R5CIH/7ljiGnB9um6c20GNcydWXkg8Yf8NO+1i1I1H:wabH/XfuM4YXD8YfkCI1H
- TLSH T199457D12679404B9E867D13899A19122EA317C250B71EECF53C0B7291E337D2BF39F66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_af0b1c98fa5526a3b53d826e176405f1_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_af0b1c98fa5526a3b53d826e176405f1_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win11ltsc2024-20260710-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_af0b1c98fa5526a3b53d826e176405f1_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 1.2MB
- SHA256 4a883aa88892b717002922eb5bf9f284c8b46b8fdae8e899e31eb2e82f71d68e
- MD5 af0b1c98fa5526a3b53d826e176405f1
- SHA1 4b2805d32f3d6d008c94ebc7fa37faadab6bc83c
- SHA512 486f30c4c9089f630caee8c7a6ed02ad82c4f1d768a13a18018d834f0cc90e3ef15422b688eaddadc3931d3d668f3d26689c8fa67318d2ca93787c4871fd963f
- SSDEEP 24576:w4R5CIH/7ljiGnB9um6c20GNcydWXkg8Yf8NO+1i1I1H:wabH/XfuM4YXD8YfkCI1H
- TLSH T199457D12679404B9E867D13899A19122EA317C250B71EECF53C0B7291E337D2BF39F66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1