General
- Target 2026-07-02_ece4145c2bb1b73ff3cb518bc456df9d_akira_amadey_blackenergy_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_stealc_vidar_wannacry
- Size 14.0MB
- Sample260702-3pcm6sds2m
- SHA256 9d9281f3276c26cf1c69ee3837d32378c3362fbb6e54855b3881388364a3eebb
- MD5 ece4145c2bb1b73ff3cb518bc456df9d
- SHA1 de186a4adad157b92e9051171038c3127e84b8a5
- SHA512 592dd3e301d79dab767d9958099a4e3d0e0a79a9cf53a942d2660668a65731cc86009a9d6ff0307acd47078ee23b90d499f25785ca757e161fbb16f016ddd8d5
- SSDEEP 196608:vGBfW7GBfWAb6cI2WyZ/K0tRPzF+Ciw6bWyZ/K0ttYVAATaqm:UWIWAHSyZ/K0tNd+ayZ/K0ttYZTDm
- TLSH T156E67C1BB2E441A9D0AAD078CF669221EB727C558BF196DF224073D92F73AD07B39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_ece4145c2bb1b73ff3cb518bc456df9d_akira_amadey_blackenergy_cobalt-strike_elex_glassworm_hi.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_ece4145c2bb1b73ff3cb518bc456df9d_akira_amadey_blackenergy_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_stealc_vidar_wannacry
- Size 14.0MB
- SHA256 9d9281f3276c26cf1c69ee3837d32378c3362fbb6e54855b3881388364a3eebb
- MD5 ece4145c2bb1b73ff3cb518bc456df9d
- SHA1 de186a4adad157b92e9051171038c3127e84b8a5
- SHA512 592dd3e301d79dab767d9958099a4e3d0e0a79a9cf53a942d2660668a65731cc86009a9d6ff0307acd47078ee23b90d499f25785ca757e161fbb16f016ddd8d5
- SSDEEP 196608:vGBfW7GBfWAb6cI2WyZ/K0tRPzF+Ciw6bWyZ/K0ttYVAATaqm:UWIWAHSyZ/K0tNd+ayZ/K0ttYZTDm
- TLSH T156E67C1BB2E441A9D0AAD078CF669221EB727C558BF196DF224073D92F73AD07B39311
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1