General
- Target 2026-07-20_ba576180d1f1628535950bba3fbd994c_amadey_blackenergy_elex_emotet_glassworm_luca-stealer_njrat_remcos_smoke-loader_stop
- Size 13.8MB
- Sample260720-vl3fesax6v
- SHA256 68525d9d5c11574687242d7f48fecaaed2c46829146b8e09eeff86e4dfaee17e
- MD5 ba576180d1f1628535950bba3fbd994c
- SHA1 7f8d84238192634acc54919c96c83b9d487b035c
- SHA512 e92d71a1931c5546ff60db2bcce8b503f46471f583652a483bc3d0778425c52398ab2d7e63ab374961d1d371dc2eab44f4428714b09c9c7f6f8093459ef8dc0b
- SSDEEP 196608:EGBfWt4rk66HtIto0AqeGZF6bUpMBF1p/kjRm4OWi2bzoxj:FWg6YoSIbUwF1VERmj2b8R
- TLSH T125E6B064B2B3763CC32B987480ADDE73BD3038551B608DBB51C5D7B42E17A68952BB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_ba576180d1f1628535950bba3fbd994c_amadey_blackenergy_elex_emotet_glassworm_luca-stealer_nj.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_ba576180d1f1628535950bba3fbd994c_amadey_blackenergy_elex_emotet_glassworm_luca-stealer_njrat_remcos_smoke-loader_stop
- Size 13.8MB
- SHA256 68525d9d5c11574687242d7f48fecaaed2c46829146b8e09eeff86e4dfaee17e
- MD5 ba576180d1f1628535950bba3fbd994c
- SHA1 7f8d84238192634acc54919c96c83b9d487b035c
- SHA512 e92d71a1931c5546ff60db2bcce8b503f46471f583652a483bc3d0778425c52398ab2d7e63ab374961d1d371dc2eab44f4428714b09c9c7f6f8093459ef8dc0b
- SSDEEP 196608:EGBfWt4rk66HtIto0AqeGZF6bUpMBF1p/kjRm4OWi2bzoxj:FWg6YoSIbUwF1VERmj2b8R
- TLSH T125E6B064B2B3763CC32B987480ADDE73BD3038551B608DBB51C5D7B42E17A68952BB32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1