General
- Target 2026-08-02_a90880c7a5455469dd88efb38d7a0048_amadey_elex_glassworm_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 11.7MB
- Sample260802-vvm24adb85
- SHA256 05deaf7d74963f7790e93409c9c2f7aa2e9da39cba226b592a930981092e2b86
- MD5 a90880c7a5455469dd88efb38d7a0048
- SHA1 d4e541bf75fe19130415eecd3ce5b691341b7e8a
- SHA512 26bd51fd4109559d53295cc4806fccf7930938f0dd9fcd72b31d9e5fb6c6569016bef2e28cbef9618aab1ef0df374e4280e72b294b17b7a675fd8b5065468366
- SSDEEP 196608:Qdn2S9+ULdNPhdm66HtIOo/eGZF6bUpMBF1p/kjRm4OWi2bs:E2SlLdNPT6MXIbUwF1VERmj2bs
- TLSH T103C6E111F7B2143EC52B4971846C9A72E879B8141B258FF70789E7347F121E2AE3AB71
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_a90880c7a5455469dd88efb38d7a0048_amadey_elex_glassworm_icedid_luca-stealer_njrat_remcos_s.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_a90880c7a5455469dd88efb38d7a0048_amadey_elex_glassworm_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 11.7MB
- SHA256 05deaf7d74963f7790e93409c9c2f7aa2e9da39cba226b592a930981092e2b86
- MD5 a90880c7a5455469dd88efb38d7a0048
- SHA1 d4e541bf75fe19130415eecd3ce5b691341b7e8a
- SHA512 26bd51fd4109559d53295cc4806fccf7930938f0dd9fcd72b31d9e5fb6c6569016bef2e28cbef9618aab1ef0df374e4280e72b294b17b7a675fd8b5065468366
- SSDEEP 196608:Qdn2S9+ULdNPhdm66HtIOo/eGZF6bUpMBF1p/kjRm4OWi2bs:E2SlLdNPT6MXIbUwF1VERmj2bs
- TLSH T103C6E111F7B2143EC52B4971846C9A72E879B8141B258FF70789E7347F121E2AE3AB71
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1