General
- Target 2026-07-11_90fd65eda3ba51835c7327c72f329492_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 3.2MB
- Sample260711-gh8alsex2t
- SHA256 7bb5892ffcddb98750473bd60a77988754f40f6a641a33d2f62aff38c4a5a98c
- MD5 90fd65eda3ba51835c7327c72f329492
- SHA1 0ae4ab06029d3477c8b90f4abd98c97fec6b9098
- SHA512 407b624c86d79fed5dca57a2a08067f82eec1e568b1faddd056fc639abdf142377171ac34cc8aac6e3751585f04b91a57d5a55f124f2e8e0c16f14007769d9dc
- SSDEEP 49152:wabH/DabH/2abH/labH//I1x+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1np:nI1M0oAaldmdmnp
- TLSH T150F55A13A2844499E156C078DE15C136EB227C6D4BF264FF33807ADA3A33AD27B79716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_90fd65eda3ba51835c7327c72f329492_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_90fd65eda3ba51835c7327c72f329492_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_90fd65eda3ba51835c7327c72f329492_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 3.2MB
- SHA256 7bb5892ffcddb98750473bd60a77988754f40f6a641a33d2f62aff38c4a5a98c
- MD5 90fd65eda3ba51835c7327c72f329492
- SHA1 0ae4ab06029d3477c8b90f4abd98c97fec6b9098
- SHA512 407b624c86d79fed5dca57a2a08067f82eec1e568b1faddd056fc639abdf142377171ac34cc8aac6e3751585f04b91a57d5a55f124f2e8e0c16f14007769d9dc
- SSDEEP 49152:wabH/DabH/2abH/labH//I1x+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1np:nI1M0oAaldmdmnp
- TLSH T150F55A13A2844499E156C078DE15C136EB227C6D4BF264FF33807ADA3A33AD27B79716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1