General
- Target 2026-04-21_3c19b9898d28cc58cfb981a967720f8c_amadey_cobalt-strike_elex_icedid_njrat_vidar_wannacry
- Size 27.8MB
- Sample260421-2ymdasdv7k
- SHA256 004f06826f9c87a4761915049f3d1aa90b8206ced110df880fb7a33b184831e3
- MD5 3c19b9898d28cc58cfb981a967720f8c
- SHA1 227091c2d13a5a0b12b18a83b753ea76346312a8
- SHA512 43a747b7485d59d3bca5258f760d2ede70511d582dc6adfb79f36a7b89303ec3ddbee34c612f3bd7c34e70ff7416913142bba7c33dc59a32c2ae990b80983ddd
- SSDEEP 786432:rHymbqJ2IuyyiLWu9O1Jy1/HwnC92Hj1inItRR+:rSQktcu9OvWQnC92p3tW
- TLSH T10F573315F6A446B4D073C1B8CAE2965AEA713C860730C6DF1399A77D2F336E1893A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-21_3c19b9898d28cc58cfb981a967720f8c_amadey_cobalt-strike_elex_icedid_njrat_vidar_wannacry.exe
Resource
win10v2004-20260130-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-21_3c19b9898d28cc58cfb981a967720f8c_amadey_cobalt-strike_elex_icedid_njrat_vidar_wannacry
- Size 27.8MB
- SHA256 004f06826f9c87a4761915049f3d1aa90b8206ced110df880fb7a33b184831e3
- MD5 3c19b9898d28cc58cfb981a967720f8c
- SHA1 227091c2d13a5a0b12b18a83b753ea76346312a8
- SHA512 43a747b7485d59d3bca5258f760d2ede70511d582dc6adfb79f36a7b89303ec3ddbee34c612f3bd7c34e70ff7416913142bba7c33dc59a32c2ae990b80983ddd
- SSDEEP 786432:rHymbqJ2IuyyiLWu9O1Jy1/HwnC92Hj1inItRR+:rSQktcu9OvWQnC92p3tW
- TLSH T10F573315F6A446B4D073C1B8CAE2965AEA713C860730C6DF1399A77D2F336E1893A731
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1