General
- Target 2026-07-20_bc1c572dc469e9a48efe709c27a7bb5a_cobalt-strike_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 1.9MB
- Sample260720-xlmfbact4j
- SHA256 c0b677415edc72c2a2d819f194841b09311ed94e2513a642699e63d7967fc000
- MD5 bc1c572dc469e9a48efe709c27a7bb5a
- SHA1 0a500dbc910de13676216b0be01896669ec22fc7
- SHA512 10c190b985a584c9ee51172a1a23e40d302cc22688bc8940d4ab5b7648e719efc58143e8fd16373c98160d4861aee02a4b3424d8012a7250b7bf0d2e69e57d2b
- SSDEEP 49152:wabH/7tugabH/LtuFI1TabH/7tugabH/LtuFI1KSW:XAAI1EAAI1W
- TLSH T11F955B13B654907AE496C0746A669167F9253C790770BCCFA3C07B163E32BE277B870A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_bc1c572dc469e9a48efe709c27a7bb5a_cobalt-strike_elex_hijackloader_redline-stealer_rhadaman.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_bc1c572dc469e9a48efe709c27a7bb5a_cobalt-strike_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 1.9MB
- SHA256 c0b677415edc72c2a2d819f194841b09311ed94e2513a642699e63d7967fc000
- MD5 bc1c572dc469e9a48efe709c27a7bb5a
- SHA1 0a500dbc910de13676216b0be01896669ec22fc7
- SHA512 10c190b985a584c9ee51172a1a23e40d302cc22688bc8940d4ab5b7648e719efc58143e8fd16373c98160d4861aee02a4b3424d8012a7250b7bf0d2e69e57d2b
- SSDEEP 49152:wabH/7tugabH/LtuFI1TabH/7tugabH/LtuFI1KSW:XAAI1EAAI1W
- TLSH T11F955B13B654907AE496C0746A669167F9253C790770BCCFA3C07B163E32BE277B870A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory