General
- Target 2026-07-30_aa28d9415dc5886e97f98874fccec340_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc_vidar
- Size 9.5MB
- Sample260730-bnst8azvfz
- SHA256 753cb16522e7c4647495f07f8d72a407b395809dc8f1a92e05159aa791aa3fb4
- MD5 aa28d9415dc5886e97f98874fccec340
- SHA1 c150f10cb6a73b6617708537a0518aa61e933dda
- SHA512 d8e8b19b45ea7a6cc6d1fcfa128c987ce878054778812a908e19f702a735b39971149aac11055b3f2a5a78c69202f77c6bf3b099ff8c551951c0beee9209a88a
- SSDEEP 98304:XMca335GOshfvdBiCkjoDMca335GOshfvdBiCkjoRbs:2IpXdbuoCIpXdbuoZs
- TLSH T11EA69E02F6A441B1D023C574C696966EE93138459B329EDF13849BAC3FB3AD19F39B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_aa28d9415dc5886e97f98874fccec340_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_aa28d9415dc5886e97f98874fccec340_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc_vidar
- Size 9.5MB
- SHA256 753cb16522e7c4647495f07f8d72a407b395809dc8f1a92e05159aa791aa3fb4
- MD5 aa28d9415dc5886e97f98874fccec340
- SHA1 c150f10cb6a73b6617708537a0518aa61e933dda
- SHA512 d8e8b19b45ea7a6cc6d1fcfa128c987ce878054778812a908e19f702a735b39971149aac11055b3f2a5a78c69202f77c6bf3b099ff8c551951c0beee9209a88a
- SSDEEP 98304:XMca335GOshfvdBiCkjoDMca335GOshfvdBiCkjoRbs:2IpXdbuoCIpXdbuoZs
- TLSH T11EA69E02F6A441B1D023C574C696966EE93138459B329EDF13849BAC3FB3AD19F39B31
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1