General
- Target 2026-07-30_7baeeb3f31092da7d826104e9344cf36_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 18.1MB
- Sample260730-ds7v2sba65
- SHA256 60fa4e2d01c3828989be505d808aa1707bad7f80221dd20b2900818d78485c55
- MD5 7baeeb3f31092da7d826104e9344cf36
- SHA1 82fc426d7454c38d96c927b6512edf17256a1a97
- SHA512 a7572ffa9b6191c0da8a1b114b2c60831ef23f7d592fd6e26b6086f8824a463986b815a58a200edb01398327f3d59ea1417b49ba440055c4e28455c51519da33
- SSDEEP 196608:XUotcqDPtTfq18UhNUotcqDPtTfq18UhVoI:XrrlW7rrlWEI
- TLSH T106177D12B3F44276E07BD17EC5A25679EA723C164B31C6CF2244B66D1E77BC18A36322
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_7baeeb3f31092da7d826104e9344cf36_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_7baeeb3f31092da7d826104e9344cf36_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 18.1MB
- SHA256 60fa4e2d01c3828989be505d808aa1707bad7f80221dd20b2900818d78485c55
- MD5 7baeeb3f31092da7d826104e9344cf36
- SHA1 82fc426d7454c38d96c927b6512edf17256a1a97
- SHA512 a7572ffa9b6191c0da8a1b114b2c60831ef23f7d592fd6e26b6086f8824a463986b815a58a200edb01398327f3d59ea1417b49ba440055c4e28455c51519da33
- SSDEEP 196608:XUotcqDPtTfq18UhNUotcqDPtTfq18UhVoI:XrrlW7rrlWEI
- TLSH T106177D12B3F44276E07BD17EC5A25679EA723C164B31C6CF2244B66D1E77BC18A36322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables packed with MEW
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1