General
- Target 2026-07-18_60616969eb0733b3f9d9851e3d9ec5f7_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 15.5MB
- Sample260718-nb5z8scx9t
- SHA256 a175c94521f8aa44a69f68d24fa183aa4b7f6e64b51207dc774995388e86e279
- MD5 60616969eb0733b3f9d9851e3d9ec5f7
- SHA1 8606c0d71a4ed24526de5791f0846ca238c81f04
- SHA512 e2f98e014ca844c39612a57c866bd08d18a5ad20486df27a66443b0e9f2069d91b53ee2e601cca15c94f09100053fb52bae8c070f92a527face2b438315b678b
- SSDEEP 196608:Qdn2S9+ULdNpcIa6QHteGZF6bUpMBF1p/kjRm4OWi2bfPdxso+:E2SlLdNqIQHhIbUwF1VERmj2b3+
- TLSH T19BF6BF21F6B48232D077C076CAD2A659FA713C554BB08BC71345A7AC2F336D2BA36725
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-18_60616969eb0733b3f9d9851e3d9ec5f7_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_60616969eb0733b3f9d9851e3d9ec5f7_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 15.5MB
- SHA256 a175c94521f8aa44a69f68d24fa183aa4b7f6e64b51207dc774995388e86e279
- MD5 60616969eb0733b3f9d9851e3d9ec5f7
- SHA1 8606c0d71a4ed24526de5791f0846ca238c81f04
- SHA512 e2f98e014ca844c39612a57c866bd08d18a5ad20486df27a66443b0e9f2069d91b53ee2e601cca15c94f09100053fb52bae8c070f92a527face2b438315b678b
- SSDEEP 196608:Qdn2S9+ULdNpcIa6QHteGZF6bUpMBF1p/kjRm4OWi2bfPdxso+:E2SlLdNqIQHhIbUwF1VERmj2b3+
- TLSH T19BF6BF21F6B48232D077C076CAD2A659FA713C554BB08BC71345A7AC2F336D2BA36725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1