General
- Target 2026-08-30_50c2372396b6312c640d98afbee0bb9f_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar_wannacry
- Size 16.8MB
- Sample260831-nlabbaga98
- SHA256 022680e3961cc24f9cddc300b6555534727ebb99fdf7d47c7dfc2aaf27b48087
- MD5 50c2372396b6312c640d98afbee0bb9f
- SHA1 021cead8e3775dc73767cd0b7f1d530809cd94b7
- SHA512 0691c69d25319ceda8b1a724be3090774b6f32a9d90fe562408ce89a349b857762e601ac3cfee87b31cf41ad22c7d67fe73cc5c03ffdedddb0e5b1a5c271d8bf
- SSDEEP 196608:FQdWQdJQdWQd7H18UvQdWQdJQdWQd7H18UE:ZHo
- TLSH T1D0074962720196AAF015EE73C72F7325B8207DA61EA0858FD60D732D1D352F16FB6389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_50c2372396b6312c640d98afbee0bb9f_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_redl.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_50c2372396b6312c640d98afbee0bb9f_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_redl.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_50c2372396b6312c640d98afbee0bb9f_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar_wannacry
- Size 16.8MB
- SHA256 022680e3961cc24f9cddc300b6555534727ebb99fdf7d47c7dfc2aaf27b48087
- MD5 50c2372396b6312c640d98afbee0bb9f
- SHA1 021cead8e3775dc73767cd0b7f1d530809cd94b7
- SHA512 0691c69d25319ceda8b1a724be3090774b6f32a9d90fe562408ce89a349b857762e601ac3cfee87b31cf41ad22c7d67fe73cc5c03ffdedddb0e5b1a5c271d8bf
- SSDEEP 196608:FQdWQdJQdWQd7H18UvQdWQdJQdWQd7H18UE:ZHo
- TLSH T1D0074962720196AAF015EE73C72F7325B8207DA61EA0858FD60D732D1D352F16FB6389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1