General
- Target 2026-04-16_d27dae320a9b84c0b4ea22588f66f3a0_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_stealc_vidar_wannacry
- Size 8.9MB
- Sample260416-j4earset2y
- SHA256 44e48ff34042ca42501274cc4e783ffc5c3dc604c7d5f924c1add3d6c9d45b51
- MD5 d27dae320a9b84c0b4ea22588f66f3a0
- SHA1 4fcd886ac0be8bbaa3a1460c439d11a6850ea70d
- SHA512 40a3513ccf411c0801dce8be4f5ad867d7fb2caea4b0bda7b19de706938619a83a3912daf44c3095cb80a951ed2a44ec4f733798ce7a7de2bff79d4d3ad69e21
- SSDEEP 98304:XM67IwE+joHzwCFk/fUqrOiOc5+bLapIRLapI5:C4ojF+CiGbcIRcI5
- TLSH T187967D1EB2A441E5C166C078CF928626E7B17C098BF196EB3194B3D92F77AD13E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-16_d27dae320a9b84c0b4ea22588f66f3a0_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260130-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_d27dae320a9b84c0b4ea22588f66f3a0_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_stealc_vidar_wannacry
- Size 8.9MB
- SHA256 44e48ff34042ca42501274cc4e783ffc5c3dc604c7d5f924c1add3d6c9d45b51
- MD5 d27dae320a9b84c0b4ea22588f66f3a0
- SHA1 4fcd886ac0be8bbaa3a1460c439d11a6850ea70d
- SHA512 40a3513ccf411c0801dce8be4f5ad867d7fb2caea4b0bda7b19de706938619a83a3912daf44c3095cb80a951ed2a44ec4f733798ce7a7de2bff79d4d3ad69e21
- SSDEEP 98304:XM67IwE+joHzwCFk/fUqrOiOc5+bLapIRLapI5:C4ojF+CiGbcIRcI5
- TLSH T187967D1EB2A441E5C166C078CF928626E7B17C098BF196EB3194B3D92F77AD13E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1