General

  • Target
    2026-06-29_6fd499bc1df6b46c75ec85f3040b831c_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar_wannacry
  • Size 11.7MB
  • Sample260630-j39ehsaw6s
  • SHA256 ad2c0151e2f9f688fa324875685f9ac89f6ab138ad6e752883f64169fc7ab9d1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-06-29_6fd499bc1df6b46c75ec85f3040b831c_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar_wannacry
    • Size 11.7MB
    • SHA256 ad2c0151e2f9f688fa324875685f9ac89f6ab138ad6e752883f64169fc7ab9d1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Detects executables containing URLs to raw contents of a Github gist

    • Detects executables embedding registry key / value combination indicative of disabling Windows Defen

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks