General
- Target 2026-07-21_d10ffee61ef29d64b9768bdc888e2bc9_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 10.5MB
- Sample260721-2awbassta1
- SHA256 0483711f1f70d22842b54e87de85b2f7316c2af628ad28b118c563f9089e7f40
- MD5 d10ffee61ef29d64b9768bdc888e2bc9
- SHA1 7580c4e8efaace1ee5bcf47e0f954201e021a941
- SHA512 9a5ebd79e675a72716cee88ab9f9e3fe0b47c867505476e4ae20d21a6ebde9ddfff5e8b4efa6c103046ef47a74ef2e292938717ea3ad562ea61514b861e92482
- SSDEEP 98304:DWrM0oAaldmdmnpS0oAaldmdmnpoWQtZ/K0tGOFWVRuLftCTxI1H:DWrpKmd0BKmd0KWyZ/K0ttYVAATIH
- TLSH T107B65903F29540E9E19AD178CF269231EB327C594BF1A5EF328076D52E76AE03B39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_d10ffee61ef29d64b9768bdc888e2bc9_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_d10ffee61ef29d64b9768bdc888e2bc9_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_d10ffee61ef29d64b9768bdc888e2bc9_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 10.5MB
- SHA256 0483711f1f70d22842b54e87de85b2f7316c2af628ad28b118c563f9089e7f40
- MD5 d10ffee61ef29d64b9768bdc888e2bc9
- SHA1 7580c4e8efaace1ee5bcf47e0f954201e021a941
- SHA512 9a5ebd79e675a72716cee88ab9f9e3fe0b47c867505476e4ae20d21a6ebde9ddfff5e8b4efa6c103046ef47a74ef2e292938717ea3ad562ea61514b861e92482
- SSDEEP 98304:DWrM0oAaldmdmnpS0oAaldmdmnpoWQtZ/K0tGOFWVRuLftCTxI1H:DWrpKmd0BKmd0KWyZ/K0ttYVAATIH
- TLSH T107B65903F29540E9E19AD178CF269231EB327C594BF1A5EF328076D52E76AE03B39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1