General
- Target 2026-07-02_e8c5bcb1d01344281d6f43831d029cbc_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar_wannacry
- Size 5.0MB
- Sample260702-xxk2mac12v
- SHA256 a33075ec43b6703b0c928a552c7987fbd8a50aa7aabfb7ffe09d663d8bd4f5de
- MD5 e8c5bcb1d01344281d6f43831d029cbc
- SHA1 fd0ed5381242df4f4cb1d95a85b0d5e7e6a560fe
- SHA512 63e1b5bcc9e0a98a0b9da5b85f903d7f9c6fe4c1d97f18d7840a97e4c37320f3ce00f649c784291b6207d782a0234d888d659c41935544998ad8c45ba90405b5
- SSDEEP 49152:PabH/LPIyNabH/HJVBXdcWabH/3IyNabH/HJVBXdcT4qiw3PASW9mMtmNRmi78gk:UIyatduIyatdtgPALImi78gkwo
- TLSH T1F7364A627150866AF026EE77C65B7725BC303C961FA0858FC60DB32C2E362F19E76359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_e8c5bcb1d01344281d6f43831d029cbc_amadey_cobalt-strike_elex_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_e8c5bcb1d01344281d6f43831d029cbc_amadey_cobalt-strike_elex_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_e8c5bcb1d01344281d6f43831d029cbc_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar_wannacry
- Size 5.0MB
- SHA256 a33075ec43b6703b0c928a552c7987fbd8a50aa7aabfb7ffe09d663d8bd4f5de
- MD5 e8c5bcb1d01344281d6f43831d029cbc
- SHA1 fd0ed5381242df4f4cb1d95a85b0d5e7e6a560fe
- SHA512 63e1b5bcc9e0a98a0b9da5b85f903d7f9c6fe4c1d97f18d7840a97e4c37320f3ce00f649c784291b6207d782a0234d888d659c41935544998ad8c45ba90405b5
- SSDEEP 49152:PabH/LPIyNabH/HJVBXdcWabH/3IyNabH/HJVBXdcT4qiw3PASW9mMtmNRmi78gk:UIyatduIyatdtgPALImi78gkwo
- TLSH T1F7364A627150866AF026EE77C65B7725BC303C961FA0858FC60DB32C2E362F19E76359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory