General
- Target 2026-08-02_d08a05034ab80b5e83a3618fab07f74e_amadey_cobalt-strike_elex_icedid_njrat_vidar_wannacry
- Size 6.2MB
- Sample260802-t9f2nasygy
- SHA256 110876b27abd6c3d6b79b4b31a664411a6ea87d080b341707cb3b9f98b7db11a
- MD5 d08a05034ab80b5e83a3618fab07f74e
- SHA1 c10c9c130cb816e2c2801e1d00a337b1a206a561
- SHA512 c890a763eba1bec14c7e440efd31bfae0125ed9f99a810519df74a6b137e37856dd4236f40fc225eeb05b000bf47f50110de6f051c4703521388753fa0a0150e
- SSDEEP 98304:VHRULKRuy5aOdBHRULKRuy5aOdJHRULKRuy5aOW:1WLqBdBWLqBdJWLqBW
- TLSH T1C4668D12F3A44271E0B3A175C5A6A76AEE7A35114B30CACF0384567D1F33BD19A3A736
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_d08a05034ab80b5e83a3618fab07f74e_amadey_cobalt-strike_elex_icedid_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_d08a05034ab80b5e83a3618fab07f74e_amadey_cobalt-strike_elex_icedid_njrat_vidar_wannacry
- Size 6.2MB
- SHA256 110876b27abd6c3d6b79b4b31a664411a6ea87d080b341707cb3b9f98b7db11a
- MD5 d08a05034ab80b5e83a3618fab07f74e
- SHA1 c10c9c130cb816e2c2801e1d00a337b1a206a561
- SHA512 c890a763eba1bec14c7e440efd31bfae0125ed9f99a810519df74a6b137e37856dd4236f40fc225eeb05b000bf47f50110de6f051c4703521388753fa0a0150e
- SSDEEP 98304:VHRULKRuy5aOdBHRULKRuy5aOdJHRULKRuy5aOW:1WLqBdBWLqBdJWLqBW
- TLSH T1C4668D12F3A44271E0B3A175C5A6A76AEE7A35114B30CACF0384567D1F33BD19A3A736
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1