db4ad0317d44d0931d0fb86ab2ed77550b1a4059053cb27456eb10ac6d4fa1c8

General

Target
2026-07-02_f1c1bc20655762a6109a8b05018225cb_amadey_cobalt-strike_conti_elex_hijackloader_icedid_njrat_vidar_wannacry
Size 715KB
Sample260702-gfkrjaav5p
SHA256 db4ad0317d44d0931d0fb86ab2ed77550b1a4059053cb27456eb10ac6d4fa1c8
MD5 f1c1bc20655762a6109a8b05018225cb
SHA1 06000e0439cbb45a3f864772c737b1031f8d51b4
SHA512 a47d92c54f3d38afee7d8f82369fc5e34a2d86e46dff12a53bee0666b34664cd473c14c54181aecab274596a522422e6fc23c32545c74bdc9763b103c51ebe4e
SSDEEP 6144:AQYzNhHynDm0K5eKQk2c+D/0vxBzkiLz9unaEWVC9jEmuSiox6oP4Vc+D/0vxBze:A3ZUnXoZ+yPz5L8aEFo4VEvyPz5L8f66
TLSH
T126F49E13E7A110F9D11AC23499E65A22F771BC32177096DF236486262F237D0AF3E7A4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-07-02_f1c1bc20655762a6109a8b05018225cb_amadey_cobalt-strike_conti_elex_hijackloader_icedid_njrat_vidar_wannacry
- Size 715KB
- SHA256 db4ad0317d44d0931d0fb86ab2ed77550b1a4059053cb27456eb10ac6d4fa1c8
- MD5 f1c1bc20655762a6109a8b05018225cb
- SHA1 06000e0439cbb45a3f864772c737b1031f8d51b4
- SHA512 a47d92c54f3d38afee7d8f82369fc5e34a2d86e46dff12a53bee0666b34664cd473c14c54181aecab274596a522422e6fc23c32545c74bdc9763b103c51ebe4e
- SSDEEP 6144:AQYzNhHynDm0K5eKQk2c+D/0vxBzkiLz9unaEWVC9jEmuSiox6oP4Vc+D/0vxBze:A3ZUnXoZ+yPz5L8aEFo4VEvyPz5L8f66
- TLSH
  T126F49E13E7A110F9D11AC23499E65A22F771BC32177096DF236486262F237D0AF3E7A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

aspackv2 discovery persistence spyware stealer adware ransomware
- Detects executables packed with ASPack
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
- Drops file in System32 directory
behavioral1 behavioral2