General
- Target 2026-08-24_58beeac702b40dffcd55a9e13f3c5a6c_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar
- Size 8.1MB
- Sample260825-p46mxasekh
- SHA256 2a9d1de739b2952f9134702a6d5693e5c4a6447ba1f61fc6349b8b0957f3b26b
- MD5 58beeac702b40dffcd55a9e13f3c5a6c
- SHA1 9de47f9bb26352162df9a9d8dc32baea4d491e9f
- SHA512 220f0461082c5f64fd8ce0aa810785e1bf8916821b895b926d23eed580ae84b63f31920d1b460f349345921128d6f155d45539de49219d3b9f0f850dc4f99955
- SSDEEP 196608:BtUvlatUvlatUvlntUvlatUvlatUvlFwcI9:BtUvlatUvlatUvlntUvlatUvlatUvlF2
- TLSH T1A0865A12B6814079E056C4709F21822AA6A13C648BE29DDB73853FCE7BF16D17B7473B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_58beeac702b40dffcd55a9e13f3c5a6c_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_58beeac702b40dffcd55a9e13f3c5a6c_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar.exe
Resource
win11ltsc2024-20260710-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_58beeac702b40dffcd55a9e13f3c5a6c_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar
- Size 8.1MB
- SHA256 2a9d1de739b2952f9134702a6d5693e5c4a6447ba1f61fc6349b8b0957f3b26b
- MD5 58beeac702b40dffcd55a9e13f3c5a6c
- SHA1 9de47f9bb26352162df9a9d8dc32baea4d491e9f
- SHA512 220f0461082c5f64fd8ce0aa810785e1bf8916821b895b926d23eed580ae84b63f31920d1b460f349345921128d6f155d45539de49219d3b9f0f850dc4f99955
- SSDEEP 196608:BtUvlatUvlatUvlntUvlatUvlatUvlFwcI9:BtUvlatUvlatUvlntUvlatUvlatUvlF2
- TLSH T1A0865A12B6814079E056C4709F21822AA6A13C648BE29DDB73853FCE7BF16D17B7473B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1