General
- Target 2026-07-29_a44ad3ea9204150cbfcccb71629b7ae8_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_vidar_wannacry
- Size 10.4MB
- Sample260729-fy2mbsxtgv
- SHA256 48fbf043749905870a59622be1e1a10572465acd67f2435dd52bfdd75aa0ebc2
- MD5 a44ad3ea9204150cbfcccb71629b7ae8
- SHA1 31159e61b62da7b7ab363719080573766620802a
- SHA512 3df9f1b80f44f266deb5ee099b0fe17ed8ccea0c708dcbdde1dfb4625913e6922486e7c558a2bf190542237e4c6c5b88a344dfdcdf4ebc7b22d766536377f9b7
- SSDEEP 196608:YEV2VLSdVm2ccIfonJEul4szEonqt9qMNo9:YU2Odg2pXnqFaEonzB9
- TLSH T114B69D32B992C175D2624070CF99ABB4C2A9BC354BF145C776807BED5E322C27E35B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_a44ad3ea9204150cbfcccb71629b7ae8_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_a44ad3ea9204150cbfcccb71629b7ae8_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_vidar_wannacry
- Size 10.4MB
- SHA256 48fbf043749905870a59622be1e1a10572465acd67f2435dd52bfdd75aa0ebc2
- MD5 a44ad3ea9204150cbfcccb71629b7ae8
- SHA1 31159e61b62da7b7ab363719080573766620802a
- SHA512 3df9f1b80f44f266deb5ee099b0fe17ed8ccea0c708dcbdde1dfb4625913e6922486e7c558a2bf190542237e4c6c5b88a344dfdcdf4ebc7b22d766536377f9b7
- SSDEEP 196608:YEV2VLSdVm2ccIfonJEul4szEonqt9qMNo9:YU2Odg2pXnqFaEonzB9
- TLSH T114B69D32B992C175D2624070CF99ABB4C2A9BC354BF145C776807BED5E322C27E35B26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1