General
- Target 2026-08-03_a883f63fbe4f7b5a60e649c3b0a3907d_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 14.6MB
- Sample260803-vs4xtstfqf
- SHA256 39ef3f567a08e8561e491d0fdfefe8376dd931a94594ecbd05a902941fad7747
- MD5 a883f63fbe4f7b5a60e649c3b0a3907d
- SHA1 848945695177b48e3dcdacf84bf55a7b78c571d7
- SHA512 4b0c242c0f0e5aca28a2afe4b49313e955d6656722074b9091bc1bdf37d2645c3e3775b0f7da35cffccd2db406bff828ea6100741d48b53d0e71253dee72b919
- SSDEEP 196608:ski9XwgwAMtPdf5PcIXqBcIBqNeGZF6bUpMBF1p/kjRm4OWi2bm:j+Ajxh5kdinBIbUwF1VERmj2bm
- TLSH T1A1F6CF2272E204A5D2AA9031CF66933167E57C384FF1D3AB724476D92F729C07A3971B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_a883f63fbe4f7b5a60e649c3b0a3907d_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a883f63fbe4f7b5a60e649c3b0a3907d_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 14.6MB
- SHA256 39ef3f567a08e8561e491d0fdfefe8376dd931a94594ecbd05a902941fad7747
- MD5 a883f63fbe4f7b5a60e649c3b0a3907d
- SHA1 848945695177b48e3dcdacf84bf55a7b78c571d7
- SHA512 4b0c242c0f0e5aca28a2afe4b49313e955d6656722074b9091bc1bdf37d2645c3e3775b0f7da35cffccd2db406bff828ea6100741d48b53d0e71253dee72b919
- SSDEEP 196608:ski9XwgwAMtPdf5PcIXqBcIBqNeGZF6bUpMBF1p/kjRm4OWi2bm:j+Ajxh5kdinBIbUwF1VERmj2bm
- TLSH T1A1F6CF2272E204A5D2AA9031CF66933167E57C384FF1D3AB724476D92F729C07A3971B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1