General
- Target 2026-08-03_9cfd28598ffe6112b95970c3684babaf_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 3.8MB
- Sample260803-fg7f9ayeqb
- SHA256 1d53f4a13e49cd1df71af3cd8104385d2974fa9c516598e2183b4b9453e8eeef
- MD5 9cfd28598ffe6112b95970c3684babaf
- SHA1 7c2733ab54e10325b53b5a065ff76d87db9c5c68
- SHA512 1e801d1a699b67dea50c1354a8f28cd406b200d514d9a527abe9683fce6e4369b3bad87bf26053eb315e08c39158cb071aa16e52f4b91e7c0cd6cb4ec0170e2b
- SSDEEP 49152:wabH/rI129dsTh7IwjturNp5h+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1p:xI1B7Iw56dc0oAaldmdmnp
- TLSH T1D1065903A69508E9D14AC034DE628232AB617C5D47F1A5FF3294BAE63E73AD03F39751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_9cfd28598ffe6112b95970c3684babaf_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_9cfd28598ffe6112b95970c3684babaf_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_9cfd28598ffe6112b95970c3684babaf_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 3.8MB
- SHA256 1d53f4a13e49cd1df71af3cd8104385d2974fa9c516598e2183b4b9453e8eeef
- MD5 9cfd28598ffe6112b95970c3684babaf
- SHA1 7c2733ab54e10325b53b5a065ff76d87db9c5c68
- SHA512 1e801d1a699b67dea50c1354a8f28cd406b200d514d9a527abe9683fce6e4369b3bad87bf26053eb315e08c39158cb071aa16e52f4b91e7c0cd6cb4ec0170e2b
- SSDEEP 49152:wabH/rI129dsTh7IwjturNp5h+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1p:xI1B7Iw56dc0oAaldmdmnp
- TLSH T1D1065903A69508E9D14AC034DE628232AB617C5D47F1A5FF3294BAE63E73AD03F39751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1