General
- Target 2026-08-07_59de3af7c61b8925422e14b797d0041d_akira_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_remcos_rhadamanthys_vidar
- Size 21.5MB
- Sample260808-bpqq9afk71
- SHA256 1c6ab1a234a5fd21ccda3471a25b461a6d49a5be5706c4a5ac25d349d7c2fa7f
- MD5 59de3af7c61b8925422e14b797d0041d
- SHA1 f839bb9e44412f65235ed885cc6f6ae86b7341c9
- SHA512 14cc21f56d89d59db79780ee8bcc47f37eadf148f0c1cca13cac0d68eb00c3926e4a27cceeab52ae519b9572e36c2842b4e2323afaebb2ca994ec1607e67df3c
- SSDEEP 393216:WTHNBpu1Qfc0hfTHNBpu1Qfc0hfTHNBpu1Qfc0ht:IHNBpu1Qfc0FHNBpu1Qfc0FHNBpu1Qfv
- TLSH T1CB37D51126DA9FECC05F9474CE0669A56A237C468F21AFDF09807E293E756B06F3811F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_59de3af7c61b8925422e14b797d0041d_akira_cobalt-strike_elex_hijackloader_icedid_njrat_redli.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_59de3af7c61b8925422e14b797d0041d_akira_cobalt-strike_elex_hijackloader_icedid_njrat_redli.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_59de3af7c61b8925422e14b797d0041d_akira_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_remcos_rhadamanthys_vidar
- Size 21.5MB
- SHA256 1c6ab1a234a5fd21ccda3471a25b461a6d49a5be5706c4a5ac25d349d7c2fa7f
- MD5 59de3af7c61b8925422e14b797d0041d
- SHA1 f839bb9e44412f65235ed885cc6f6ae86b7341c9
- SHA512 14cc21f56d89d59db79780ee8bcc47f37eadf148f0c1cca13cac0d68eb00c3926e4a27cceeab52ae519b9572e36c2842b4e2323afaebb2ca994ec1607e67df3c
- SSDEEP 393216:WTHNBpu1Qfc0hfTHNBpu1Qfc0hfTHNBpu1Qfc0ht:IHNBpu1Qfc0FHNBpu1Qfc0FHNBpu1Qfv
- TLSH T1CB37D51126DA9FECC05F9474CE0669A56A237C468F21AFDF09807E293E756B06F3811F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1