General
- Target 2026-08-07_abbea37b506404a39793e52cadc49b5f_akira_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_remcos_rhadamanthys_vidar
- Size 21.5MB
- Sample260808-a64trsztaw
- SHA256 43a9f6d542adac1d21f1974bfe7b4215ac9f64dd09ee76a6494841a0e463997a
- MD5 abbea37b506404a39793e52cadc49b5f
- SHA1 6dd436a38aa1b7008a8692243fc0d575abcaf9ff
- SHA512 6d6898ddd99ae91cb1778c17f0402aacd63ca820c8bad3f240fdc85887201985569c8b64e2ef7973546b169a8520514b0e64792b73a9d71ebc62d8eda033c4fa
- SSDEEP 393216:XTHNBpu1Qfc0hfTHNBpu1Qfc0hfTHNBpu1Qfc0hS:jHNBpu1Qfc0FHNBpu1Qfc0FHNBpu1Qfc
- TLSH T1D837D51162DA9FECC05F9474CE0669A56A237C468F21AFDF09807E293E756B06F3811F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_abbea37b506404a39793e52cadc49b5f_akira_cobalt-strike_elex_hijackloader_icedid_njrat_redli.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_abbea37b506404a39793e52cadc49b5f_akira_cobalt-strike_elex_hijackloader_icedid_njrat_redli.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_abbea37b506404a39793e52cadc49b5f_akira_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_remcos_rhadamanthys_vidar
- Size 21.5MB
- SHA256 43a9f6d542adac1d21f1974bfe7b4215ac9f64dd09ee76a6494841a0e463997a
- MD5 abbea37b506404a39793e52cadc49b5f
- SHA1 6dd436a38aa1b7008a8692243fc0d575abcaf9ff
- SHA512 6d6898ddd99ae91cb1778c17f0402aacd63ca820c8bad3f240fdc85887201985569c8b64e2ef7973546b169a8520514b0e64792b73a9d71ebc62d8eda033c4fa
- SSDEEP 393216:XTHNBpu1Qfc0hfTHNBpu1Qfc0hfTHNBpu1Qfc0hS:jHNBpu1Qfc0FHNBpu1Qfc0FHNBpu1Qfc
- TLSH T1D837D51162DA9FECC05F9474CE0669A56A237C468F21AFDF09807E293E756B06F3811F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1