futurax | 2026-07-31_b0453377c76bdd184ad024000861b15d_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_stealc_vidar_wannacry

Sharing

Target
2026-07-31_b0453377c76bdd184ad024000861b15d_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_stealc_vidar_wannacry
Size 11.4MB
Sample260731-vlyr8syshs
SHA256 2735556699f5a9d0e6f11bb1c99df41f27f3941286aab658ceb07a7666d8f5ed
MD5 b0453377c76bdd184ad024000861b15d
SHA1 e04c4e0fcbf9ed71a91bb6898ec117f77ff535ce
SHA512 4919108747e1894ca67a57bdfc787b6539baf4aac931bacc3d4a101a77416729e945eebb7d5fd984e4b4d6f9cbf2cf408d058b3d84e33496f121ea91afdbfba4
SSDEEP 98304:XMca335GOUyL6HtItjBCUdEUyL6HtItj8KRuy5aL69TIOSAOTIOSAv:2IL66HtItcUdN66HtItYqU69TfaTfT
TLSH
T1DBC66C1132F2243ED21F5E3D403C5D36A678282A9B668EFF7444F9B419527D58A3AB33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm futurax

Detects Futurax 1 IoCs

resource	yara_rule
sample	family_futurax

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

Detects executables embedding registry key / value combination indicative of disabling Windows Defen 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RegKeyComb_DisableWinDefender

Detects executables packed with MEW 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MEW

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-31_b0453377c76bdd184ad024000861b15d_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_stealc_vidar_wannacry

2026-07-31_b0453377c76bdd184ad024000861b15d_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_stealc_vidar_wannacry

.exe 11.4MB

SHA256 2735556699f5a9d0e6f11bb1c99df41f27f3941286aab658ceb07a7666d8f5ed
MD5 b0453377c76bdd184ad024000861b15d
SHA1 e04c4e0fcbf9ed71a91bb6898ec117f77ff535ce
SHA512 4919108747e1894ca67a57bdfc787b6539baf4aac931bacc3d4a101a77416729e945eebb7d5fd984e4b4d6f9cbf2cf408d058b3d84e33496f121ea91afdbfba4
SSDEEP 98304:XMca335GOUyL6HtItjBCUdEUyL6HtItj8KRuy5aL69TIOSAOTIOSAv:2IL66HtItcUdN66HtItYqU69TfaTfT
TLSH
T1DBC66C1132F2243ED21F5E3D403C5D36A678282A9B668EFF7444F9B419527D58A3AB33
MD5 SHA1 SHA512 SSDEEP TLSH

Detects Futurax
Detects executables containing URLs to raw contents of a Github gist
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
Detects executables packed with MEW
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24996

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths