General
- Target 2026-06-25_29b07679dd1d6dfeab7d2f22096fcee6_amadey_blackenergy_cloudeye_cobalt-strike_darkgate_elex_emotet_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_vidar_wannacry
- Size 8.1MB
- Sample260629-3fbphsax6p
- SHA256 af23014ecf9245eb0e8d6fdd01e2733b972756b7ca202c12b2f871f61531368a
- MD5 29b07679dd1d6dfeab7d2f22096fcee6
- SHA1 f31d9d331bdb6847d9f3f2039c04dd8fe059bd35
- SHA512 221f81588a80d66b688b369bf8cd5ba9110dafe68f4e0aa3574359217caf6974c106afc4c22daa6ce361f0f367fb71ba52484d7924dda9f8a0cc4c094b57a984
- SSDEEP 98304:Ul77GBfWTQlJDHj77GBfWUOduKRuy5aV0oAaldmdmnpInUm8g7joB:EGBfWMlFHLGBfW7duqvKmd0y18gvoB
- TLSH T173868C03E2A440A5F076A130CE669635DB737C645BB1D5FFA28176D92E33BC17A36322
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-25_29b07679dd1d6dfeab7d2f22096fcee6_amadey_blackenergy_cloudeye_cobalt-strike_darkgate_elex_.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_29b07679dd1d6dfeab7d2f22096fcee6_amadey_blackenergy_cloudeye_cobalt-strike_darkgate_elex_emotet_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_vidar_wannacry
- Size 8.1MB
- SHA256 af23014ecf9245eb0e8d6fdd01e2733b972756b7ca202c12b2f871f61531368a
- MD5 29b07679dd1d6dfeab7d2f22096fcee6
- SHA1 f31d9d331bdb6847d9f3f2039c04dd8fe059bd35
- SHA512 221f81588a80d66b688b369bf8cd5ba9110dafe68f4e0aa3574359217caf6974c106afc4c22daa6ce361f0f367fb71ba52484d7924dda9f8a0cc4c094b57a984
- SSDEEP 98304:Ul77GBfWTQlJDHj77GBfWUOduKRuy5aV0oAaldmdmnpInUm8g7joB:EGBfWMlFHLGBfW7duqvKmd0y18gvoB
- TLSH T173868C03E2A440A5F076A130CE669635DB737C645BB1D5FFA28176D92E33BC17A36322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1