General
- Target 2026-07-23_88a8fe41f9240b8756b54727a5bc7e55_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 4.3MB
- Sample260723-hm8ydafm31
- SHA256 066cecd15f25a39d0ce64f141c58dc8bbf08fed59b47064cd128bff155b92db4
- MD5 88a8fe41f9240b8756b54727a5bc7e55
- SHA1 9c0a2348b63c3b40015df22d779fffe914c88678
- SHA512 b83fbbc82d4a960b622f1b3f6628097c80d10564936de2810cb0eae10f6df4a80a6e9ee2e871b7dc027ab3ce57f1ce95a34b3268e94ed774552c62abb0cef619
- SSDEEP 49152:wabH/rI1Ffu6UfuQabH/PI1Ffu6Ufub6+Cq99LyHHI+t6O8N+ailEy6dmpzeioKe:xI1FDUmI1FDU670oAaldmdmnp
- TLSH T14F267B13A29444E9D556D038CE52D132EB227C690BF1A5EF33D0B6E92E336D13B39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_88a8fe41f9240b8756b54727a5bc7e55_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_88a8fe41f9240b8756b54727a5bc7e55_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_88a8fe41f9240b8756b54727a5bc7e55_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 4.3MB
- SHA256 066cecd15f25a39d0ce64f141c58dc8bbf08fed59b47064cd128bff155b92db4
- MD5 88a8fe41f9240b8756b54727a5bc7e55
- SHA1 9c0a2348b63c3b40015df22d779fffe914c88678
- SHA512 b83fbbc82d4a960b622f1b3f6628097c80d10564936de2810cb0eae10f6df4a80a6e9ee2e871b7dc027ab3ce57f1ce95a34b3268e94ed774552c62abb0cef619
- SSDEEP 49152:wabH/rI1Ffu6UfuQabH/PI1Ffu6Ufub6+Cq99LyHHI+t6O8N+ailEy6dmpzeioKe:xI1FDUmI1FDU670oAaldmdmnp
- TLSH T14F267B13A29444E9D556D038CE52D132EB227C690BF1A5EF33D0B6E92E336D13B39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1