General
- Target 2026-07-10_c23a3e926d49be0c7b851e169e2db8f4_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_vidar_wannacry
- Size 15.1MB
- Sample260710-x77ndafx6r
- SHA256 e360a9d4f6c35fd2ce240a0eadfed2af9d288f8ddb7cad288a0eef5e7c749d0f
- MD5 c23a3e926d49be0c7b851e169e2db8f4
- SHA1 6668b9294a51889c0b771e2586f0b7121e596658
- SHA512 c0e8c09fad694bfd6a78f7d6f3e3634106a20dc46a30da9c5288cb9f494f138aaadfda74edce39240169ab3c3c977dc73cc47cf16331a374ca2dd0cd3663672c
- SSDEEP 196608:YEV2VLSdVm2S9+ULdNldZmo6PLoCWyZ/K0ttYVAATLojPr:YU2Odg2SlLdNlhHdyZ/K0ttYZT0X
- TLSH T15CF69D13F2B842B6D077C175C9A29725EA727C05077096EF5350B3A82E37AE1AB39731
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-10_c23a3e926d49be0c7b851e169e2db8f4_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_c23a3e926d49be0c7b851e169e2db8f4_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_vidar_wannacry
- Size 15.1MB
- SHA256 e360a9d4f6c35fd2ce240a0eadfed2af9d288f8ddb7cad288a0eef5e7c749d0f
- MD5 c23a3e926d49be0c7b851e169e2db8f4
- SHA1 6668b9294a51889c0b771e2586f0b7121e596658
- SHA512 c0e8c09fad694bfd6a78f7d6f3e3634106a20dc46a30da9c5288cb9f494f138aaadfda74edce39240169ab3c3c977dc73cc47cf16331a374ca2dd0cd3663672c
- SSDEEP 196608:YEV2VLSdVm2S9+ULdNldZmo6PLoCWyZ/K0ttYVAATLojPr:YU2Odg2SlLdNlhHdyZ/K0ttYZT0X
- TLSH T15CF69D13F2B842B6D077C175C9A29725EA727C05077096EF5350B3A82E37AE1AB39731
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1