General
- Target 2026-06-30_abfb9478f510cb22591246349c62edd9_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 13.8MB
- Sample260630-ybehdsew2q
- SHA256 6b58f7cfa4a2174987a80462439d5f073bfd4fddaabedc8b01a11f28631c6b5b
- MD5 abfb9478f510cb22591246349c62edd9
- SHA1 ed38a3e2c1d9bd6bb88d8262c64f8f6f69b7eb0a
- SHA512 c6eb061bdc73a80390d0fc65f45a961e361d99e9ba4cf3184cbfc9a5ef7db2f2440c9c220f4cc0cea377b44e10d032772b9250fa4ad51d738c155743e0ed9732
- SSDEEP 196608:Qdn2S9+ULdNpcIa6QHteGZF6bUpMBF1p/kjRm4OWi2bfPX:E2SlLdNqIQHhIbUwF1VERmj2bn
- TLSH T15BE6CF22F6B44232C076C076CE969665FAB27C554BB08BD71345B39C2F336D2BA36325
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-30_abfb9478f510cb22591246349c62edd9_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_abfb9478f510cb22591246349c62edd9_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 13.8MB
- SHA256 6b58f7cfa4a2174987a80462439d5f073bfd4fddaabedc8b01a11f28631c6b5b
- MD5 abfb9478f510cb22591246349c62edd9
- SHA1 ed38a3e2c1d9bd6bb88d8262c64f8f6f69b7eb0a
- SHA512 c6eb061bdc73a80390d0fc65f45a961e361d99e9ba4cf3184cbfc9a5ef7db2f2440c9c220f4cc0cea377b44e10d032772b9250fa4ad51d738c155743e0ed9732
- SSDEEP 196608:Qdn2S9+ULdNpcIa6QHteGZF6bUpMBF1p/kjRm4OWi2bfPX:E2SlLdNqIQHhIbUwF1VERmj2bn
- TLSH T15BE6CF22F6B44232C076C076CE969665FAB27C554BB08BD71345B39C2F336D2BA36325
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1