General
- Target 2026-07-11_0fb4a7edf3a77e7e5af16c27534ceafe_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_vidar
- Size 13.0MB
- Sample260711-vmcldshw51
- SHA256 a39aaf9bb629b8c21be5d24437416c95d845419eb2b70cb98d21459a5441dfd0
- MD5 0fb4a7edf3a77e7e5af16c27534ceafe
- SHA1 d3ddcbc49651e1f22d9413244bf22b0fe8cd4980
- SHA512 53e22e405d162ea486ad6e5853aaa8112bac73e0c2246df75ad048e5e3d80a3aec3fdd877c71423bd66d2be01517b7c52c0f97c4107a416496c42c6f148494ae
- SSDEEP 196608:5Kmd0ZdYJEul4szEonqtHdxWyZ/K0ttYVAAT0:gqpqFaEon9yZ/K0ttYZT0
- TLSH T1EBD69D23B99580A8E166C174CE69AB71C765BC294BF154DF36807BE91E327C13F34B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-11_0fb4a7edf3a77e7e5af16c27534ceafe_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_0fb4a7edf3a77e7e5af16c27534ceafe_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_vidar
- Size 13.0MB
- SHA256 a39aaf9bb629b8c21be5d24437416c95d845419eb2b70cb98d21459a5441dfd0
- MD5 0fb4a7edf3a77e7e5af16c27534ceafe
- SHA1 d3ddcbc49651e1f22d9413244bf22b0fe8cd4980
- SHA512 53e22e405d162ea486ad6e5853aaa8112bac73e0c2246df75ad048e5e3d80a3aec3fdd877c71423bd66d2be01517b7c52c0f97c4107a416496c42c6f148494ae
- SSDEEP 196608:5Kmd0ZdYJEul4szEonqtHdxWyZ/K0ttYVAAT0:gqpqFaEon9yZ/K0ttYZT0
- TLSH T1EBD69D23B99580A8E166C174CE69AB71C765BC294BF154DF36807BE91E327C13F34B22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1