General
- Target 2026-08-05_e4b7454565b04cf57128f3255d68f1fd_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 10.5MB
- Sample260805-yx89wsfl6v
- SHA256 9dfe41370c0a60035c4d857cd9156f658a2559452a94ff84c6e1af0323b3b53b
- MD5 e4b7454565b04cf57128f3255d68f1fd
- SHA1 689af03463c1611ba7e7e896ce1d5d1843124f46
- SHA512 aee5b4ff7bfbb72750e22e2dce4e27f8ac8baf63d823609d7f6107fbf1d893311372e4d842f21f5505fa60bbc1f94bb90781b948ec9b0f76ae1df3843a77ec37
- SSDEEP 98304:RI1FDMOWQtZ/K0tGOFWVRuLftCTR0oAaldmdmnpr0oAaldmdmnpdCJ:oFDrWyZ/K0ttYVAATmKmd0SKmd0KJ
- TLSH T1A3B65A03F29944E9E19AD178CE268231EB327C594BF1A5EF329076D52E73AD03B39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_e4b7454565b04cf57128f3255d68f1fd_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_e4b7454565b04cf57128f3255d68f1fd_cobalt-strike_elex_hijackloader_icedid_njrat_redline-ste.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_e4b7454565b04cf57128f3255d68f1fd_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar
- Size 10.5MB
- SHA256 9dfe41370c0a60035c4d857cd9156f658a2559452a94ff84c6e1af0323b3b53b
- MD5 e4b7454565b04cf57128f3255d68f1fd
- SHA1 689af03463c1611ba7e7e896ce1d5d1843124f46
- SHA512 aee5b4ff7bfbb72750e22e2dce4e27f8ac8baf63d823609d7f6107fbf1d893311372e4d842f21f5505fa60bbc1f94bb90781b948ec9b0f76ae1df3843a77ec37
- SSDEEP 98304:RI1FDMOWQtZ/K0tGOFWVRuLftCTR0oAaldmdmnpr0oAaldmdmnpdCJ:oFDrWyZ/K0ttYVAATmKmd0SKmd0KJ
- TLSH T1A3B65A03F29944E9E19AD178CE268231EB327C594BF1A5EF329076D52E73AD03B39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1