General
- Target 2026-07-03_8ac473a394851648208afa8fecae6b22_amadey_cobalt-strike_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_ryuk_satacom_stealc_vidar_wannacry
- Size 17.6MB
- Sample260703-pm5dhsd13p
- SHA256 96214b00e6bd0d1d9809fb1c01df5a1ab81e6af4b3e96af2c71c8138655c8a87
- MD5 8ac473a394851648208afa8fecae6b22
- SHA1 84816dd3e818d2a968c059bb4b797de6bd03849f
- SHA512 dad2a1ad91f502520af32facf2af927e0719b84226b0da87b7b06f8cbed77b3c17704d51b0c9cb136ae83360a08a88811289053a4c52a6572d8b74740b8a1590
- SSDEEP 196608:6WyZ/K0ttYVAAT1Kmd0eolySWyZ/K0ttYVAAT1Kmd0eolnKz:VyZ/K0ttYZTEq0WyZ/K0ttYZTEq0dK
- TLSH T166176A13F2A501E9E06AD174CF668231DB727C594BF1A6EF224076D52E33AD07B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_8ac473a394851648208afa8fecae6b22_amadey_cobalt-strike_emotet_hijackloader_icedid_luca-ste.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_8ac473a394851648208afa8fecae6b22_amadey_cobalt-strike_emotet_hijackloader_icedid_luca-ste.exe
Resource
win11ltsc2024-20260629-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_8ac473a394851648208afa8fecae6b22_amadey_cobalt-strike_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_ryuk_satacom_stealc_vidar_wannacry
- Size 17.6MB
- SHA256 96214b00e6bd0d1d9809fb1c01df5a1ab81e6af4b3e96af2c71c8138655c8a87
- MD5 8ac473a394851648208afa8fecae6b22
- SHA1 84816dd3e818d2a968c059bb4b797de6bd03849f
- SHA512 dad2a1ad91f502520af32facf2af927e0719b84226b0da87b7b06f8cbed77b3c17704d51b0c9cb136ae83360a08a88811289053a4c52a6572d8b74740b8a1590
- SSDEEP 196608:6WyZ/K0ttYVAAT1Kmd0eolySWyZ/K0ttYVAAT1Kmd0eolnKz:VyZ/K0ttYZTEq0WyZ/K0ttYZTEq0dK
- TLSH T166176A13F2A501E9E06AD174CF668231DB727C594BF1A6EF224076D52E33AD07B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1