General
- Target 2026-07-21_a8b0dcd446c4d3c25dbb36a1f5bf944a_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_smoke-loader_stealc_vidar
- Size 5.3MB
- Sample260721-eht2wafw8t
- SHA256 912512acad20373833f8463fde72c181f108ef69f88c0c64ad4ac35ed449f2f5
- MD5 a8b0dcd446c4d3c25dbb36a1f5bf944a
- SHA1 a5770f68d91818a202034a771792d8d9dade2a5b
- SHA512 6fc051aa39dcdb3651523b6d4e90a7cc197a0f49ce1b3225f4d5a3f5aa9f35ece115a06d554f18cf651ba9ad4659bd10814fdff383ee5f6814c0d4564b4ba6f7
- SSDEEP 49152:XTgUYFMmvwa3bBN4FiGOXZ2wQql+Cq99LykqJtb2IoTVBXdcx+Cq99LyHf3NCLTP:XMca335GOshfvdBiCkjovjjoU
- TLSH T166468D12F6A442B1D023C578C696966EE93134458B319EDF1384DBAC3FB3AE19B39731
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-21_a8b0dcd446c4d3c25dbb36a1f5bf944a_amadey_cobalt-strike_elex_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_a8b0dcd446c4d3c25dbb36a1f5bf944a_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_smoke-loader_stealc_vidar
- Size 5.3MB
- SHA256 912512acad20373833f8463fde72c181f108ef69f88c0c64ad4ac35ed449f2f5
- MD5 a8b0dcd446c4d3c25dbb36a1f5bf944a
- SHA1 a5770f68d91818a202034a771792d8d9dade2a5b
- SHA512 6fc051aa39dcdb3651523b6d4e90a7cc197a0f49ce1b3225f4d5a3f5aa9f35ece115a06d554f18cf651ba9ad4659bd10814fdff383ee5f6814c0d4564b4ba6f7
- SSDEEP 49152:XTgUYFMmvwa3bBN4FiGOXZ2wQql+Cq99LykqJtb2IoTVBXdcx+Cq99LyHf3NCLTP:XMca335GOshfvdBiCkjovjjoU
- TLSH T166468D12F6A442B1D023C578C696966EE93134458B319EDF1384DBAC3FB3AE19B39731
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1