General
- Target 2026-08-01_4675a1563c150874e68bc9993445fc20_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar_wannacry
- Size 7.7MB
- Sample260801-vkmnkstwdv
- SHA256 1b0f1e0d509ffaf300264b752a6b350fe08765b6bf9084cdbd782a38c50e6912
- MD5 4675a1563c150874e68bc9993445fc20
- SHA1 33692c085a4f4fb9fa2ee1a40070b27e1bf257db
- SHA512 55f570fb1bae5c7e1096eec78a1901f476c5f4ddfd1ce8af89a53220dc158b54c84d47af34e540e3247c3ae53e707b29c163ad3021e84195487f19ec3507ae31
- SSDEEP 98304:VIyatduIyatdXOIyatduIyatdXOeYQI1F:XQdWQdX2QdWQdXHYTF
- TLSH T1A8863A62B100863AF025EE77C35B7718B8303D954EE1894FD64DB72C2A352F29EB6356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_4675a1563c150874e68bc9993445fc20_amadey_cobalt-strike_elex_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_4675a1563c150874e68bc9993445fc20_amadey_cobalt-strike_elex_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_4675a1563c150874e68bc9993445fc20_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar_wannacry
- Size 7.7MB
- SHA256 1b0f1e0d509ffaf300264b752a6b350fe08765b6bf9084cdbd782a38c50e6912
- MD5 4675a1563c150874e68bc9993445fc20
- SHA1 33692c085a4f4fb9fa2ee1a40070b27e1bf257db
- SHA512 55f570fb1bae5c7e1096eec78a1901f476c5f4ddfd1ce8af89a53220dc158b54c84d47af34e540e3247c3ae53e707b29c163ad3021e84195487f19ec3507ae31
- SSDEEP 98304:VIyatduIyatdXOIyatduIyatdXOeYQI1F:XQdWQdX2QdWQdXHYTF
- TLSH T1A8863A62B100863AF025EE77C35B7718B8303D954EE1894FD64DB72C2A352F29EB6356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1