General
- Target 2026-07-29_400f5f0de9ce5970fe351522da6aead3_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_njrat_smoke-loader_stealc_vidar
- Size 9.8MB
- Sample260729-hw5bjseh64
- SHA256 bfb38fa49ef8c45e0492cd9719c48b4d9206d25c029b12406657cc447cc11256
- MD5 400f5f0de9ce5970fe351522da6aead3
- SHA1 1724f6132bcaa077d98d3ac66c118e9dcbd47900
- SHA512 c70e255e95cde6acd9f88bf820e45e772c789887ce947c2ddd7e0c81987faa9f04db321cd6f62fb6cdbf2622cd3737bc0c6cc0dfa1fcf0893bb008ad5cccf7f6
- SSDEEP 98304:XMca335GOs0oAaldmdmnpW0oAaldmdmnp2KRuy5aY6QfkZct6djoQ:2IcKmd0NKmd0wqr6OPt6ZoQ
- TLSH T19DA66C03F2A445A6D062D074CE86D676EB313C494BF155EB3280B6E93E33AD1BB39725
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_400f5f0de9ce5970fe351522da6aead3_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_n.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_400f5f0de9ce5970fe351522da6aead3_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_njrat_smoke-loader_stealc_vidar
- Size 9.8MB
- SHA256 bfb38fa49ef8c45e0492cd9719c48b4d9206d25c029b12406657cc447cc11256
- MD5 400f5f0de9ce5970fe351522da6aead3
- SHA1 1724f6132bcaa077d98d3ac66c118e9dcbd47900
- SHA512 c70e255e95cde6acd9f88bf820e45e772c789887ce947c2ddd7e0c81987faa9f04db321cd6f62fb6cdbf2622cd3737bc0c6cc0dfa1fcf0893bb008ad5cccf7f6
- SSDEEP 98304:XMca335GOs0oAaldmdmnpW0oAaldmdmnp2KRuy5aY6QfkZct6djoQ:2IcKmd0NKmd0wqr6OPt6ZoQ
- TLSH T19DA66C03F2A445A6D062D074CE86D676EB313C494BF155EB3280B6E93E33AD1BB39725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1