General
- Target 2026-07-29_f2f4eb2d0201a9e6f741c5eaf6ef2312_amadey_blackenergy_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry
- Size 8.7MB
- Sample260729-xthgbsdd55
- SHA256 5a22160aa7ac2b60529406c5c49d11f1a5ba302aa9dca3a44e7deff9770fdf8d
- MD5 f2f4eb2d0201a9e6f741c5eaf6ef2312
- SHA1 3a51ca367c7ccde02172db3c5483c82a4f5f4e3e
- SHA512 3f503986266e74e2cdf578045db141907d9dee708ecd26036bc07b69472772f18c22bd2ef7ec9055a885af05864c58601c173b9660e0f181f2e478b7d8545f88
- SSDEEP 98304:VR77GBfW8yOR77GBfW8yH62d8UyL6HtItjkgcfFcNFcEuwLNe9ajRpoGGjoY:XGBfW8yqGBfW8yH62dl66HtIto0A9oY
- TLSH T172963B64B2B3763CC227987480ADDE73FD3138551B308DBB51C5D6B42E17A68992BB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_f2f4eb2d0201a9e6f741c5eaf6ef2312_amadey_blackenergy_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_f2f4eb2d0201a9e6f741c5eaf6ef2312_amadey_blackenergy_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry
- Size 8.7MB
- SHA256 5a22160aa7ac2b60529406c5c49d11f1a5ba302aa9dca3a44e7deff9770fdf8d
- MD5 f2f4eb2d0201a9e6f741c5eaf6ef2312
- SHA1 3a51ca367c7ccde02172db3c5483c82a4f5f4e3e
- SHA512 3f503986266e74e2cdf578045db141907d9dee708ecd26036bc07b69472772f18c22bd2ef7ec9055a885af05864c58601c173b9660e0f181f2e478b7d8545f88
- SSDEEP 98304:VR77GBfW8yOR77GBfW8yH62d8UyL6HtItjkgcfFcNFcEuwLNe9ajRpoGGjoY:XGBfW8yqGBfW8yH62dl66HtIto0A9oY
- TLSH T172963B64B2B3763CC227987480ADDE73FD3138551B308DBB51C5D6B42E17A68992BB32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1