General
- Target 2026-07-28_bae1d77615a33841d8ae44388b79175a_amadey_cobalt-strike_elex_icedid_njrat_vidar_wannacry
- Size 5.8MB
- Sample260728-ytssqsgm9v
- SHA256 57d6e608aec003e03e09c5542a187ba7795c5e128c4f06cba307cee8a2294986
- MD5 bae1d77615a33841d8ae44388b79175a
- SHA1 377c67814858e7d4bdfe20eaee196cf197daac50
- SHA512 7889a957f719c38f82f4101b635491edfa827a5fe3b06ea3eee7d5eb9196e0212bb3c84ba82c8253843cd935d3898b4874c816f5aa12092cbfbb08721237f9a1
- SSDEEP 49152:VrjLkLgVLKRWTQ6Zs5DhgPoXpvPji0AjxqJtb2IgVBXdco:VrdKRuy5a2joFPdf
- TLSH T1C7566C12F6A44271E0B3A175C9E6A66AED7634510B30CACF0384977D2F33BD1993A736
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_bae1d77615a33841d8ae44388b79175a_amadey_cobalt-strike_elex_icedid_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_bae1d77615a33841d8ae44388b79175a_amadey_cobalt-strike_elex_icedid_njrat_vidar_wannacry
- Size 5.8MB
- SHA256 57d6e608aec003e03e09c5542a187ba7795c5e128c4f06cba307cee8a2294986
- MD5 bae1d77615a33841d8ae44388b79175a
- SHA1 377c67814858e7d4bdfe20eaee196cf197daac50
- SHA512 7889a957f719c38f82f4101b635491edfa827a5fe3b06ea3eee7d5eb9196e0212bb3c84ba82c8253843cd935d3898b4874c816f5aa12092cbfbb08721237f9a1
- SSDEEP 49152:VrjLkLgVLKRWTQ6Zs5DhgPoXpvPji0AjxqJtb2IgVBXdco:VrdKRuy5a2joFPdf
- TLSH T1C7566C12F6A44271E0B3A175C9E6A66AED7634510B30CACF0384977D2F33BD1993A736
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1