General
- Target 2026-07-30_0f853e00d820b969c1cafdf7b9acdb9b_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_vidar_wannacry
- Size 10.6MB
- Sample260730-ws6bbsej9w
- SHA256 2a32c0b861363bc644e227da0db4d5e957d930abd843633f4e5ae46681b57d29
- MD5 0f853e00d820b969c1cafdf7b9acdb9b
- SHA1 675f342f8b97fe25d7d6a3fd4edebb9533753fc5
- SHA512 2235d0340661ab4219cc5f70c41d071a2f7985b684e824214cb44b934498a35e790eb1e343039b18ac5b0f3752eccf4ce196526eaddd78053fc5fd1493e23819
- SSDEEP 98304:UucmoEV2VjnSdVyucF2UgXq9ouFkULGyqobNq1SdLucmosjoVz5rkfkZc/joXjom:YEV2VLSdVm2S9+ULdNldZmo6PLoToFod
- TLSH T153B66C12F6B48272D073C275C4A69655E9717C1117308AEB8364F73CAE3B6E29E3A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_0f853e00d820b969c1cafdf7b9acdb9b_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_0f853e00d820b969c1cafdf7b9acdb9b_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_vidar_wannacry
- Size 10.6MB
- SHA256 2a32c0b861363bc644e227da0db4d5e957d930abd843633f4e5ae46681b57d29
- MD5 0f853e00d820b969c1cafdf7b9acdb9b
- SHA1 675f342f8b97fe25d7d6a3fd4edebb9533753fc5
- SHA512 2235d0340661ab4219cc5f70c41d071a2f7985b684e824214cb44b934498a35e790eb1e343039b18ac5b0f3752eccf4ce196526eaddd78053fc5fd1493e23819
- SSDEEP 98304:UucmoEV2VjnSdVyucF2UgXq9ouFkULGyqobNq1SdLucmosjoVz5rkfkZc/joXjom:YEV2VLSdVm2S9+ULdNldZmo6PLoToFod
- TLSH T153B66C12F6B48272D073C275C4A69655E9717C1117308AEB8364F73CAE3B6E29E3A731
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1