General
- Target 2026-08-02_78e6e25c09ce41390107f6ed82cf17a6_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 16.1MB
- Sample260802-wl9eeaycqg
- SHA256 2ef68084977c6fbbc8ed9018fc1df3abe201e06f2cff4aee52d03fbe0fad7d9f
- MD5 78e6e25c09ce41390107f6ed82cf17a6
- SHA1 eb89bda249c65e983e10421d4a2762ddb4627975
- SHA512 1690506625a9785d7b32b34c3bfab9b6877424c6f47dd5a59e869ff95db092adc1509a0fff08113c4afa9a73fa4803f099b115ef880583a28aaf3a26dff4dd0d
- SSDEEP 196608:5T8qdD66HtIto0ALojcIGoYeGZF6bUpMBF1p/kjRm4OWi2b6e:ta6YokI+sIbUwF1VERmj2bB
- TLSH T1B407B06471B3357CC21B84788669DD33BA703C555BF08EBB6184F6F42D22A94792BB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_78e6e25c09ce41390107f6ed82cf17a6_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_78e6e25c09ce41390107f6ed82cf17a6_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 16.1MB
- SHA256 2ef68084977c6fbbc8ed9018fc1df3abe201e06f2cff4aee52d03fbe0fad7d9f
- MD5 78e6e25c09ce41390107f6ed82cf17a6
- SHA1 eb89bda249c65e983e10421d4a2762ddb4627975
- SHA512 1690506625a9785d7b32b34c3bfab9b6877424c6f47dd5a59e869ff95db092adc1509a0fff08113c4afa9a73fa4803f099b115ef880583a28aaf3a26dff4dd0d
- SSDEEP 196608:5T8qdD66HtIto0ALojcIGoYeGZF6bUpMBF1p/kjRm4OWi2b6e:ta6YokI+sIbUwF1VERmj2bB
- TLSH T1B407B06471B3357CC21B84788669DD33BA703C555BF08EBB6184F6F42D22A94792BB32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables packed with MEW
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1