General
- Target 2026-07-06_9b1a80e5f754a9e296c94ecb995b40f1_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_njrat_smoke-loader_stealc_vidar
- Size 10.4MB
- Sample260707-cgnglacy2p
- SHA256 ae2e89f95a77c1b4ac2c9dc91fa376b3af97c21534f4d730a759a4db1b468c54
- MD5 9b1a80e5f754a9e296c94ecb995b40f1
- SHA1 a750570d62133d3def07d175a39e3bf54d09397d
- SHA512 285f11c15a7b490ccd6c8c83b6a3d52af3b799155a0452eeaff61114800949b8696c90823b88a88aae7e315e6051c553ce2355e2e1ebd70c2209cb2a7c35e3c4
- SSDEEP 98304:XMca335GjnMca334bKUgTH2M2m9Uz0oAaldmdmnpPfkZcTdfkZcnjoo:2IaYgTH2qTKmd0tPTZPjoo
- TLSH T166B66B12B169416DD066D074CB8BDA26EE313C8A0770A8EF1281F6B43E77AF57B39315
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-06_9b1a80e5f754a9e296c94ecb995b40f1_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_n.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_9b1a80e5f754a9e296c94ecb995b40f1_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_njrat_smoke-loader_stealc_vidar
- Size 10.4MB
- SHA256 ae2e89f95a77c1b4ac2c9dc91fa376b3af97c21534f4d730a759a4db1b468c54
- MD5 9b1a80e5f754a9e296c94ecb995b40f1
- SHA1 a750570d62133d3def07d175a39e3bf54d09397d
- SHA512 285f11c15a7b490ccd6c8c83b6a3d52af3b799155a0452eeaff61114800949b8696c90823b88a88aae7e315e6051c553ce2355e2e1ebd70c2209cb2a7c35e3c4
- SSDEEP 98304:XMca335GjnMca334bKUgTH2M2m9Uz0oAaldmdmnpPfkZcTdfkZcnjoo:2IaYgTH2qTKmd0tPTZPjoo
- TLSH T166B66B12B169416DD066D074CB8BDA26EE313C8A0770A8EF1281F6B43E77AF57B39315
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1