General
- Target 2026-07-03_77d953c556cdc3853161d0e16db4b2ec_amadey_blackenergy_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 13.1MB
- Sample260703-dee8wafv6j
- SHA256 b48546475350e19558b8d9225671d141353d5f3d8efad106f5564c8daef04f5d
- MD5 77d953c556cdc3853161d0e16db4b2ec
- SHA1 7264f21d396e01dd2695c5c1d6e14bc9526d03b7
- SHA512 950b785f476045e70b127407fe09dc47b19f0d7ce3e4a7954f142c20106305778cd0b5b87dea32323477e4a079b3d9647f34e79ba7a0ec61dae01476df7f4727
- SSDEEP 196608:EGBfWt4rk66HtIto0AqeGZF6bUpMBF1p/kjRm4OWi2bAdR:FWg6YoSIbUwF1VERmj2bK
- TLSH T1D8D6BFA472B3357CC32B9878406DDE73BD3038551B608D7B51C5DAB42E17A68A92BF32
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-03_77d953c556cdc3853161d0e16db4b2ec_amadey_blackenergy_elex_emotet_glassworm_icedid_luca-ste.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_77d953c556cdc3853161d0e16db4b2ec_amadey_blackenergy_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 13.1MB
- SHA256 b48546475350e19558b8d9225671d141353d5f3d8efad106f5564c8daef04f5d
- MD5 77d953c556cdc3853161d0e16db4b2ec
- SHA1 7264f21d396e01dd2695c5c1d6e14bc9526d03b7
- SHA512 950b785f476045e70b127407fe09dc47b19f0d7ce3e4a7954f142c20106305778cd0b5b87dea32323477e4a079b3d9647f34e79ba7a0ec61dae01476df7f4727
- SSDEEP 196608:EGBfWt4rk66HtIto0AqeGZF6bUpMBF1p/kjRm4OWi2bAdR:FWg6YoSIbUwF1VERmj2bK
- TLSH T1D8D6BFA472B3357CC32B9878406DDE73BD3038551B608D7B51C5DAB42E17A68A92BF32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1