General
- Target 2026-07-10_7ea3c6e322dedf404e6609479a619b15_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 11.0MB
- Sample260710-warefsgt5v
- SHA256 e30081cc8a11daa3317dd5f63dff332ecceab7816b58d02a804ecbd6f2287609
- MD5 7ea3c6e322dedf404e6609479a619b15
- SHA1 0c79b5b828d9089ae4898a371aea4d6c0717d2e8
- SHA512 dbd16cb8a4b4e5b9df5957c9c60a7e3a2c0df272d79c6ef2c72d2387dc232c001ddd95dad3ddaf737f957b1d3383c75515349f3eab5621d882db0165f9fa9480
- SSDEEP 49152:wabH/bhGturNp5Q+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyQI1H:Fc6dR0oAaldmdmnpQI1H
- TLSH T1BEC65903A65508E9D14AC034DE668132AB617C5D47F2A5FF3294BAE63E73AD03F39B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_7ea3c6e322dedf404e6609479a619b15_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_7ea3c6e322dedf404e6609479a619b15_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_7ea3c6e322dedf404e6609479a619b15_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 11.0MB
- SHA256 e30081cc8a11daa3317dd5f63dff332ecceab7816b58d02a804ecbd6f2287609
- MD5 7ea3c6e322dedf404e6609479a619b15
- SHA1 0c79b5b828d9089ae4898a371aea4d6c0717d2e8
- SHA512 dbd16cb8a4b4e5b9df5957c9c60a7e3a2c0df272d79c6ef2c72d2387dc232c001ddd95dad3ddaf737f957b1d3383c75515349f3eab5621d882db0165f9fa9480
- SSDEEP 49152:wabH/bhGturNp5Q+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyQI1H:Fc6dR0oAaldmdmnpQI1H
- TLSH T1BEC65903A65508E9D14AC034DE668132AB617C5D47F2A5FF3294BAE63E73AD03F39B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1