General
- Target 2026-07-20_69fb16b9b6b97917a2facdb33ee9d4d5_amadey_blackenergy_elex_emotet_glassworm_luca-stealer_njrat_remcos_smoke-loader_stop
- Size 14.0MB
- Sample260720-nt8h3sa16s
- SHA256 ca1cb7e66ce340232f45dd4accceb67b2e8bd88bbec65152839d4f5c0bf3e635
- MD5 69fb16b9b6b97917a2facdb33ee9d4d5
- SHA1 ba46e3f16c4958d66c17e25ea5494515d5aa1249
- SHA512 20cb184e813309bdeaa67f24b0c4eb99e56b0af3827abd4653a1fc1195222a8ab985099a91bb18347b0e7e54fe37c91d9f3a0789bdc98eda13a2ed559ac50255
- SSDEEP 196608:EGBfWt4rk66HtIto0AqeGZF6bUpMBF1p/kjRm4OWi2bzoVPL:FWg6YoSIbUwF1VERmj2b8p
- TLSH T1ECE6BF64B2B3763DC22B987480ADDE73BD3038551B208DBB51C5D7B42E17A68953BB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_69fb16b9b6b97917a2facdb33ee9d4d5_amadey_blackenergy_elex_emotet_glassworm_luca-stealer_nj.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_69fb16b9b6b97917a2facdb33ee9d4d5_amadey_blackenergy_elex_emotet_glassworm_luca-stealer_njrat_remcos_smoke-loader_stop
- Size 14.0MB
- SHA256 ca1cb7e66ce340232f45dd4accceb67b2e8bd88bbec65152839d4f5c0bf3e635
- MD5 69fb16b9b6b97917a2facdb33ee9d4d5
- SHA1 ba46e3f16c4958d66c17e25ea5494515d5aa1249
- SHA512 20cb184e813309bdeaa67f24b0c4eb99e56b0af3827abd4653a1fc1195222a8ab985099a91bb18347b0e7e54fe37c91d9f3a0789bdc98eda13a2ed559ac50255
- SSDEEP 196608:EGBfWt4rk66HtIto0AqeGZF6bUpMBF1p/kjRm4OWi2bzoVPL:FWg6YoSIbUwF1VERmj2b8p
- TLSH T1ECE6BF64B2B3763DC22B987480ADDE73BD3038551B208DBB51C5D7B42E17A68953BB32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1