General
- Target 2026-07-17_53f1a322fb6d55bc346d64f5064c8b3d_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 2.7MB
- Sample260718-eezg7afv3r
- SHA256 a459a350f7d7f892cf54d0e87b07bd6a2c8e9c35b2338c9b48ca46d8c3d9c101
- MD5 53f1a322fb6d55bc346d64f5064c8b3d
- SHA1 1c2fbf86b299595d9da8a16fac56b1b67401d8a3
- SHA512 e96bd6df4054940acb32db231f0c0798fa913c443d2e765a56a7cbabf7d9b9c7ec094dc343268eca3a27269aa6c8001efcd49e6aeca6543f35a7fad2bde01254
- SSDEEP 24576:P4R5CIH/75Gu20GfLhcuQLRsverPEGgjI45bl9Mbonwap41+zzPTThwv3EJ1I1H:PabH/guYScerPrgjI45TMwwapIgTlI1H
- TLSH T19FD5192271A2045AF559D932CF16A325A7D13C698FF183EFF10972C92B725F07A3970A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_53f1a322fb6d55bc346d64f5064c8b3d_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_53f1a322fb6d55bc346d64f5064c8b3d_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_53f1a322fb6d55bc346d64f5064c8b3d_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 2.7MB
- SHA256 a459a350f7d7f892cf54d0e87b07bd6a2c8e9c35b2338c9b48ca46d8c3d9c101
- MD5 53f1a322fb6d55bc346d64f5064c8b3d
- SHA1 1c2fbf86b299595d9da8a16fac56b1b67401d8a3
- SHA512 e96bd6df4054940acb32db231f0c0798fa913c443d2e765a56a7cbabf7d9b9c7ec094dc343268eca3a27269aa6c8001efcd49e6aeca6543f35a7fad2bde01254
- SSDEEP 24576:P4R5CIH/75Gu20GfLhcuQLRsverPEGgjI45bl9Mbonwap41+zzPTThwv3EJ1I1H:PabH/guYScerPrgjI45TMwwapIgTlI1H
- TLSH T19FD5192271A2045AF559D932CF16A325A7D13C698FF183EFF10972C92B725F07A3970A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1