General
- Target 2026-08-02_5874712ddbe568ba8db2e8f661241d29_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 18.5MB
- Sample260802-w6ck6sel4v
- SHA256 311370876826e480e53ffa2919c908a719ba7bc8aead8ac88085ef573f6386c4
- MD5 5874712ddbe568ba8db2e8f661241d29
- SHA1 490fa8398f71716ef35173a9b08f83fb96b5880a
- SHA512 cbe2e54cafe8b2072094501f376edc4f99a4a3b6bb4eba71707941c227d43da452c21ddb1c8957da921c414eb48479252efc1887903086071d09f06b30e04ab0
- SSDEEP 196608:1WLqTWLqcWLqAoJidQWyZ/K0ttYVAATsP5eGZF6bUpMBF1p/kjRm4OWi2bA:vNK/SyZ/K0ttYZT+IbUwF1VERmj2bA
- TLSH T1C617BF13F2A842B5E077E175CAA69766EF323C454B7095CF134463AD1F33AD0AA39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_5874712ddbe568ba8db2e8f661241d29_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_5874712ddbe568ba8db2e8f661241d29_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 18.5MB
- SHA256 311370876826e480e53ffa2919c908a719ba7bc8aead8ac88085ef573f6386c4
- MD5 5874712ddbe568ba8db2e8f661241d29
- SHA1 490fa8398f71716ef35173a9b08f83fb96b5880a
- SHA512 cbe2e54cafe8b2072094501f376edc4f99a4a3b6bb4eba71707941c227d43da452c21ddb1c8957da921c414eb48479252efc1887903086071d09f06b30e04ab0
- SSDEEP 196608:1WLqTWLqcWLqAoJidQWyZ/K0ttYVAATsP5eGZF6bUpMBF1p/kjRm4OWi2bA:vNK/SyZ/K0ttYZT+IbUwF1VERmj2bA
- TLSH T1C617BF13F2A842B5E077E175CAA69766EF323C454B7095CF134463AD1F33AD0AA39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1