General
- Target 2026-08-01_305658f2b90e5dcf92a23b5ee7352b7b_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_vidar_wannacry
- Size 9.0MB
- Sample260801-vs238sea67
- SHA256 8daf82527b1385b6f155097435c0df9cb81534ba924a4bb4ec6b5869829a8fd3
- MD5 305658f2b90e5dcf92a23b5ee7352b7b
- SHA1 2ea1318c31c7f43f1d1a61a5d2471530dd36daf2
- SHA512 12c6ea52f9ecff8739ab765703cf5e7df76f4d54892e9f16ecc69e8e225c666416456641b6deb40586e1b425271c3db5119b0d5b9306dcfa293955f35d43ae6c
- SSDEEP 98304:UucmoEV2VjnSdVyucF2UgXq9ouFkULGyqobNq1C0oAaldmdmnpeLapIOxfkZcl:YEV2VLSdVm2S9+ULdNKKmd04cIOdPl
- TLSH T1CC967C23B2E541A6D166C071CF469635E7B27C294BF186EB3240B6D92F33AC0773A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-01_305658f2b90e5dcf92a23b5ee7352b7b_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_305658f2b90e5dcf92a23b5ee7352b7b_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_vidar_wannacry
- Size 9.0MB
- SHA256 8daf82527b1385b6f155097435c0df9cb81534ba924a4bb4ec6b5869829a8fd3
- MD5 305658f2b90e5dcf92a23b5ee7352b7b
- SHA1 2ea1318c31c7f43f1d1a61a5d2471530dd36daf2
- SHA512 12c6ea52f9ecff8739ab765703cf5e7df76f4d54892e9f16ecc69e8e225c666416456641b6deb40586e1b425271c3db5119b0d5b9306dcfa293955f35d43ae6c
- SSDEEP 98304:UucmoEV2VjnSdVyucF2UgXq9ouFkULGyqobNq1C0oAaldmdmnpeLapIOxfkZcl:YEV2VLSdVm2S9+ULdNKKmd04cIOdPl
- TLSH T1CC967C23B2E541A6D166C071CF469635E7B27C294BF186EB3240B6D92F33AC0773A716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1