General
- Target 2026-07-15_d4f4c678f2c735793c482695bb7387ed_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_njrat_smoke-loader_stealc_vidar
- Size 8.4MB
- Sample260715-wsxdesd18x
- SHA256 0db640bd0c765d0a0081a0751f65d1c8891db9fe48b4a2915da138e2b67587c2
- MD5 d4f4c678f2c735793c482695bb7387ed
- SHA1 bfebe249f948c89213f0adf80d9a765e7e1a233b
- SHA512 02ad8090095ddd9fde79cdf5711d286934f1936bd2db862a92b419fe49053b924003ae9c998f8dbad0ef80616c561b35e9e96ea5167870fcc1b715b946689c10
- SSDEEP 98304:XMca335GOs0oAaldmdmnpW0oAaldmdmnp2KRuy5aY67dN:2IcKmd0NKmd0wqr67dN
- TLSH T19D967B03B29444E5D166D134CE4AD236EB367C594BF1A5EF3280BAD92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_d4f4c678f2c735793c482695bb7387ed_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_n.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_d4f4c678f2c735793c482695bb7387ed_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_njrat_smoke-loader_stealc_vidar
- Size 8.4MB
- SHA256 0db640bd0c765d0a0081a0751f65d1c8891db9fe48b4a2915da138e2b67587c2
- MD5 d4f4c678f2c735793c482695bb7387ed
- SHA1 bfebe249f948c89213f0adf80d9a765e7e1a233b
- SHA512 02ad8090095ddd9fde79cdf5711d286934f1936bd2db862a92b419fe49053b924003ae9c998f8dbad0ef80616c561b35e9e96ea5167870fcc1b715b946689c10
- SSDEEP 98304:XMca335GOs0oAaldmdmnpW0oAaldmdmnp2KRuy5aY67dN:2IcKmd0NKmd0wqr67dN
- TLSH T19D967B03B29444E5D166D134CE4AD236EB367C594BF1A5EF3280BAD92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1