General
- Target 2026-06-30_e922ae974ae062fa2aae2ca290a5e9fa_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 12.2MB
- Sample260701-cqbt6aev2s
- SHA256 e31ef24f36e45d66bee2b630d67ea85d2932adf8738b7ccb1680ea2788c534ca
- MD5 e922ae974ae062fa2aae2ca290a5e9fa
- SHA1 1ab03e680d973357587d3841317ff568a843ab8d
- SHA512 3a60813c9f3fd6434aa03881892c74542d832d8be9310f870b049283125f89c8e5b18521feda75d32cea4fa5002002610776db3f5ff0be0a3b8434f96190b74d
- SSDEEP 196608:C4ogcIyoA21cICeGZF6bUpMBF1p/kjRm4OWi2bh:aNCwfIbUwF1VERmj2bh
- TLSH T128D6BE22B1E14165C0AA8075CF929725D7F13C698FF083EB7245B2D92F736D07A3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-30_e922ae974ae062fa2aae2ca290a5e9fa_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_e922ae974ae062fa2aae2ca290a5e9fa_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 12.2MB
- SHA256 e31ef24f36e45d66bee2b630d67ea85d2932adf8738b7ccb1680ea2788c534ca
- MD5 e922ae974ae062fa2aae2ca290a5e9fa
- SHA1 1ab03e680d973357587d3841317ff568a843ab8d
- SHA512 3a60813c9f3fd6434aa03881892c74542d832d8be9310f870b049283125f89c8e5b18521feda75d32cea4fa5002002610776db3f5ff0be0a3b8434f96190b74d
- SSDEEP 196608:C4ogcIyoA21cICeGZF6bUpMBF1p/kjRm4OWi2bh:aNCwfIbUwF1VERmj2bh
- TLSH T128D6BE22B1E14165C0AA8075CF929725D7F13C698FF083EB7245B2D92F736D07A3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1