General
- Target 2026-06-04_4f8619b338f2fbde299baccf1ff076c3_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar_wannacry
- Size 10.7MB
- Sample260604-xp8gysds3p
- SHA256 26162d166798f551f724d496120ab34f162770799d047f819660f67ae7bd6b85
- MD5 4f8619b338f2fbde299baccf1ff076c3
- SHA1 6a58345a69b7db8850cd2201d1adde1b2758411e
- SHA512 e4a927033f1c9e177fb0273519c0feec6f75f4a203fd1470b7639f28d7ffe6f3e3ef6648bc5f74c40fa6f8afdc734474e3520b7605301da4b688237181a2b33f
- SSDEEP 98304:eIyatduIyatdtgPALWIyatduIyatdtgPALh0oAaldmdmnpR:mQdWQdMALeQdWQdMALWKmd0/
- TLSH T1CBB65A227101856AF015EE36CB1AB324B9207C9A4FE189CFE60D779C2A362F17F76355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_4f8619b338f2fbde299baccf1ff076c3_amadey_cobalt-strike_elex_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_4f8619b338f2fbde299baccf1ff076c3_amadey_cobalt-strike_elex_hijackloader_icedid_luca-steal.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_4f8619b338f2fbde299baccf1ff076c3_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar_wannacry
- Size 10.7MB
- SHA256 26162d166798f551f724d496120ab34f162770799d047f819660f67ae7bd6b85
- MD5 4f8619b338f2fbde299baccf1ff076c3
- SHA1 6a58345a69b7db8850cd2201d1adde1b2758411e
- SHA512 e4a927033f1c9e177fb0273519c0feec6f75f4a203fd1470b7639f28d7ffe6f3e3ef6648bc5f74c40fa6f8afdc734474e3520b7605301da4b688237181a2b33f
- SSDEEP 98304:eIyatduIyatdtgPALWIyatduIyatdtgPALh0oAaldmdmnpR:mQdWQdMALeQdWQdMALWKmd0/
- TLSH T1CBB65A227101856AF015EE36CB1AB324B9207C9A4FE189CFE60D779C2A362F17F76355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1