General
- Target 2026-07-06_1aed78f43bb3486bae704d87a61e8078_amadey_cobalt-strike_darkgate_elex_icedid_njrat_smoke-loader_stealc_vidar_wannacry
- Size 7.3MB
- Sample260706-2ek15acy2t
- SHA256 da5ba5e4805d9f612b9f39f1b42e4c63f91edb52496ddecab38d154c1707b278
- MD5 1aed78f43bb3486bae704d87a61e8078
- SHA1 e1ebd5b16418c49fb244f51675408e3a68946ba2
- SHA512 5320e5ba29f4369efe1e98bd3bce26ac807268574de3cc1ff300b3f856567fd863d4b04cc0bdc4ff40e23314f2eb84c347b66a256b2f4cd60fd859c582cd609f
- SSDEEP 98304:XMca335GOUyL6HtItjBCUdEUyL6HtItj8KRuy5aL6RfkZco:2IL66HtItcUdN66HtItYqU69Po
- TLSH T122765B507273253EC62B8C74815DEE73F83828152B514EFB5584E7B02E179E89E3AB36
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-06_1aed78f43bb3486bae704d87a61e8078_amadey_cobalt-strike_darkgate_elex_icedid_njrat_smoke-lo.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_1aed78f43bb3486bae704d87a61e8078_amadey_cobalt-strike_darkgate_elex_icedid_njrat_smoke-loader_stealc_vidar_wannacry
- Size 7.3MB
- SHA256 da5ba5e4805d9f612b9f39f1b42e4c63f91edb52496ddecab38d154c1707b278
- MD5 1aed78f43bb3486bae704d87a61e8078
- SHA1 e1ebd5b16418c49fb244f51675408e3a68946ba2
- SHA512 5320e5ba29f4369efe1e98bd3bce26ac807268574de3cc1ff300b3f856567fd863d4b04cc0bdc4ff40e23314f2eb84c347b66a256b2f4cd60fd859c582cd609f
- SSDEEP 98304:XMca335GOUyL6HtItjBCUdEUyL6HtItj8KRuy5aL6RfkZco:2IL66HtItcUdN66HtItYqU69Po
- TLSH T122765B507273253EC62B8C74815DEE73F83828152B514EFB5584E7B02E179E89E3AB36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1