General
- Target 2026-08-02_46750b2ab782e43ef80bcc2de6f145f9_amadey_blankgrabber_cobalt-strike_elex_floxif_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 801KB
- Sample260802-kp6bdayhjb
- SHA256 365792a75804c42c5bc3b2cf1e1bbeade4bc0f61035d8cb5023cbaeed2f95b8e
- MD5 46750b2ab782e43ef80bcc2de6f145f9
- SHA1 23dc9edd4e1b894a359f85b00408732d97999b29
- SHA512 7708126224e5ba38fa2468fdeabc367593339d548006ad4bd5a5fececafa57ee54d4492833c38ea2d2267ef86742659ec1dd4fc84af45f757a8f9965c05ff1fd
- SSDEEP 24576:UuoSPcmwYTmUjFCTOOXO667+vS/5rEH71:v8mwYmURCjp6avSu
- TLSH T1C805CF223DD1C1BAD2336170195DD348A6BAF8354F3A49C7B7CC225D6F285C28F25BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_46750b2ab782e43ef80bcc2de6f145f9_amadey_blankgrabber_cobalt-strike_elex_floxif_glassworm_.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_46750b2ab782e43ef80bcc2de6f145f9_amadey_blankgrabber_cobalt-strike_elex_floxif_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 801KB
- SHA256 365792a75804c42c5bc3b2cf1e1bbeade4bc0f61035d8cb5023cbaeed2f95b8e
- MD5 46750b2ab782e43ef80bcc2de6f145f9
- SHA1 23dc9edd4e1b894a359f85b00408732d97999b29
- SHA512 7708126224e5ba38fa2468fdeabc367593339d548006ad4bd5a5fececafa57ee54d4492833c38ea2d2267ef86742659ec1dd4fc84af45f757a8f9965c05ff1fd
- SSDEEP 24576:UuoSPcmwYTmUjFCTOOXO667+vS/5rEH71:v8mwYmURCjp6avSu
- TLSH T1C805CF223DD1C1BAD2336170195DD348A6BAF8354F3A49C7B7CC225D6F285C28F25BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Floxif payload
-
UPX dump on OEP (original entry point)
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL