General
- Target 2026-05-31_2ab01c596de9f0cebeba29534849c2ff_amadey_blackenergy_cloudeye_cobalt-strike_darkgate_elex_emotet_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_vidar_wannacry
- Size 14.4MB
- Sample260531-zzapsaax5k
- SHA256 193a7b73679713e5c4fb394ed9cdc18389eb1449a6f34a86cb13247a92585001
- MD5 2ab01c596de9f0cebeba29534849c2ff
- SHA1 74d1d97755f1979c26de93f2112222c0a76b2138
- SHA512 61b628057979dad97b932f3dd7492a9d0c525057504895877751c470ca9a8dc9b623ab783b5661a692fab0fcb4c395e05bc173f3be657b5870e515c15e77409e
- SSDEEP 196608:EGBfWMlFHLGBfW7duqvKmd0y18URo7WyZ/K0ttYVAATMOq4L:FWUYWdSq3y6yZ/K0ttYZTUG
- TLSH T151E67B03F2A441A5F0A6E134CE669631DB337C554BF195EF228076E92E33AD17B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-31_2ab01c596de9f0cebeba29534849c2ff_amadey_blackenergy_cloudeye_cobalt-strike_darkgate_elex_.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-31_2ab01c596de9f0cebeba29534849c2ff_amadey_blackenergy_cloudeye_cobalt-strike_darkgate_elex_emotet_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_vidar_wannacry
- Size 14.4MB
- SHA256 193a7b73679713e5c4fb394ed9cdc18389eb1449a6f34a86cb13247a92585001
- MD5 2ab01c596de9f0cebeba29534849c2ff
- SHA1 74d1d97755f1979c26de93f2112222c0a76b2138
- SHA512 61b628057979dad97b932f3dd7492a9d0c525057504895877751c470ca9a8dc9b623ab783b5661a692fab0fcb4c395e05bc173f3be657b5870e515c15e77409e
- SSDEEP 196608:EGBfWMlFHLGBfW7duqvKmd0y18URo7WyZ/K0ttYVAATMOq4L:FWUYWdSq3y6yZ/K0ttYZTUG
- TLSH T151E67B03F2A441A5F0A6E134CE669631DB337C554BF195EF228076E92E33AD17B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1