General
- Target 2026-07-28_87a525e5b3438cb48037c27399ddb036_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_vidar_wannacry
- Size 13.7MB
- Sample260728-y69a9averg
- SHA256 d1ed0e9f9b5d37681eb1d3890dea91545b11f3da76eaca7f0d865f7f4da6afee
- MD5 87a525e5b3438cb48037c27399ddb036
- SHA1 599af221810dbf067836e05555a80fc204310ad6
- SHA512 f28d2532ac59208e0d93268b09227c540ccb6d9262bab2dd95546a6964f89c4357eff43f749d009b84dafdb598b50e1dc97d1fc2110f715ec90175f5c2e8969b
- SSDEEP 196608:YEV2VLSdVm2S9+ULdNldZmo6PLoCWyZ/K0ttYVAATx:YU2Odg2SlLdNlhHdyZ/K0ttYZTx
- TLSH T160E69D03F6E441B5D066C275CA729221EA72BC150B7096EF5350B7A82F3BAE16F39731
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_87a525e5b3438cb48037c27399ddb036_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_87a525e5b3438cb48037c27399ddb036_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_vidar_wannacry
- Size 13.7MB
- SHA256 d1ed0e9f9b5d37681eb1d3890dea91545b11f3da76eaca7f0d865f7f4da6afee
- MD5 87a525e5b3438cb48037c27399ddb036
- SHA1 599af221810dbf067836e05555a80fc204310ad6
- SHA512 f28d2532ac59208e0d93268b09227c540ccb6d9262bab2dd95546a6964f89c4357eff43f749d009b84dafdb598b50e1dc97d1fc2110f715ec90175f5c2e8969b
- SSDEEP 196608:YEV2VLSdVm2S9+ULdNldZmo6PLoCWyZ/K0ttYVAATx:YU2Odg2SlLdNlhHdyZ/K0ttYZTx
- TLSH T160E69D03F6E441B5D066C275CA729221EA72BC150B7096EF5350B7A82F3BAE16F39731
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1