General
- Target 2026-08-03_ccf3c0cd1b15b5a899b1368307eee23a_amadey_blackenergy_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_stop_vidar
- Size 11.1MB
- Sample260804-lm15baswft
- SHA256 d8dbf2de387075f31e157da67c408ac5b1b9465547f9fca42e99273cc1e90bd7
- MD5 ccf3c0cd1b15b5a899b1368307eee23a
- SHA1 517b9444de50079bd4a84e5d30c501df6ec2fadd
- SHA512 d0ca4da50b1469bff5e129d7435606117b1fb63ce4a965795ca35f14a73f253ac7088a8573fb156cc4f990272704d1998454ce87307e94b005373af8429b3814
- SSDEEP 196608:XGBfWAa/I+mhS1qfPKmd0ddodCdgoyoKq+06X:sWASI+PQfyqglzIX
- TLSH T15CC68D02B2A441B5D077D174C9A29675EB727C450BB096DF2284F6E92F33BD0BE36722
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_ccf3c0cd1b15b5a899b1368307eee23a_amadey_blackenergy_cobalt-strike_elex_emotet_glassworm_h.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_ccf3c0cd1b15b5a899b1368307eee23a_amadey_blackenergy_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_stop_vidar
- Size 11.1MB
- SHA256 d8dbf2de387075f31e157da67c408ac5b1b9465547f9fca42e99273cc1e90bd7
- MD5 ccf3c0cd1b15b5a899b1368307eee23a
- SHA1 517b9444de50079bd4a84e5d30c501df6ec2fadd
- SHA512 d0ca4da50b1469bff5e129d7435606117b1fb63ce4a965795ca35f14a73f253ac7088a8573fb156cc4f990272704d1998454ce87307e94b005373af8429b3814
- SSDEEP 196608:XGBfWAa/I+mhS1qfPKmd0ddodCdgoyoKq+06X:sWASI+PQfyqglzIX
- TLSH T15CC68D02B2A441B5D077D174C9A29675EB727C450BB096DF2284F6E92F33BD0BE36722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1