futurax | 780956a3ac93993291c45a9414f5de606c105d6c0f491e3c09461a9a2edb27d5 | Triage™

Login
Reports

Overview

overview

Static

static

2026-08-03...de.exe

windows10-2004-x64

2026-08-03...de.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_3ef7882b535e9c55b4c8bd1ec1a96fbd_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
Size 15.9MB
Sample260804-dh66rsfj4z
SHA256 780956a3ac93993291c45a9414f5de606c105d6c0f491e3c09461a9a2edb27d5
MD5 3ef7882b535e9c55b4c8bd1ec1a96fbd
SHA1 5e50afafa9234717ed06ad14255376098628214e
SHA512 a2422a8c72b2ce9d52a6b0323f335ce59ed92a0702a5aff6cfa31c852a4846eaaf2c5a517e3fc9c1e43403d90518f3448b5087f56dc957728863a28c5bcda70b
SSDEEP 196608:1WLqTWLqcWLqAoQKmd06o3eGZF6bUpMBF1p/kjRm4OWi2bS:vNK/3q8PIbUwF1VERmj2bS
TLSH
T169F6CF12F2944271D072D075C9979666EB763C450BB096DF2384B7ED2E33BD1BA3A322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

futurax adware discovery persistence spyware stealer worm

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

2026-08-03_3ef7882b535e9c55b4c8bd1ec1a96fbd_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

13 signatures

150 seconds

adware discovery futurax persistence spyware stealer worm

Behavioral task

behavioral2

Sample

2026-08-03_3ef7882b535e9c55b4c8bd1ec1a96fbd_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

18 signatures

150 seconds

adware discovery futurax spyware stealer worm

Malware Config

Targets

- Target
  2026-08-03_3ef7882b535e9c55b4c8bd1ec1a96fbd_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 15.9MB
- SHA256 780956a3ac93993291c45a9414f5de606c105d6c0f491e3c09461a9a2edb27d5
- MD5 3ef7882b535e9c55b4c8bd1ec1a96fbd
- SHA1 5e50afafa9234717ed06ad14255376098628214e
- SHA512 a2422a8c72b2ce9d52a6b0323f335ce59ed92a0702a5aff6cfa31c852a4846eaaf2c5a517e3fc9c1e43403d90518f3448b5087f56dc957728863a28c5bcda70b
- SSDEEP 196608:1WLqTWLqcWLqAoQKmd06o3eGZF6bUpMBF1p/kjRm4OWi2bS:vNK/3q8PIbUwF1VERmj2bS
- TLSH
  T169F6CF12F2944271D072D075C9979666EB763C450BB096DF2384B7ED2E33BD1BA3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware discovery futurax persistence spyware stealer worm
- Detects Futurax
- Family: Futurax
  Futurax is a Windows worm written in Delphi.
  worm futurax
- Detects executables packed with MEW
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryfuturaxpersistencespywarestealerworm

behavioral2

adwarediscoveryfuturaxspywarestealerworm

© 2018-2026

Terms | Privacy