General
- Target 2026-08-03_82c9028b7320a32ffc3dcc84871a6c3d_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 20.4MB
- Sample260804-m6qclayclh
- SHA256 18a1e66085a2eb02b1ba0aa5a55929f60277a2a0330fd1d4e9f850ca03380b4e
- MD5 82c9028b7320a32ffc3dcc84871a6c3d
- SHA1 59e5c233393fb7e6b960e9004d60bf317f909451
- SHA512 02b06efdee94827cdab01ac573656520dfb9dca7a025f051a7cca7cb5ea029b43f05d016625097c5054dee7b524d452f83b57401464b222b70f22430e2454ba3
- SSDEEP 196608:5T8qdD66HtIto0ALojcIGoYeGZF6bUpMBF1p/kjRm4OWi2b+Tf4Tf7:ta6YokI+sIbUwF1VERmj2bycz
- TLSH T1F3279D2132F2253ED21F553D81398D36AA603C2A5BB2CE7B7040F9F91D62B55691BB33
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_82c9028b7320a32ffc3dcc84871a6c3d_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_82c9028b7320a32ffc3dcc84871a6c3d_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 20.4MB
- SHA256 18a1e66085a2eb02b1ba0aa5a55929f60277a2a0330fd1d4e9f850ca03380b4e
- MD5 82c9028b7320a32ffc3dcc84871a6c3d
- SHA1 59e5c233393fb7e6b960e9004d60bf317f909451
- SHA512 02b06efdee94827cdab01ac573656520dfb9dca7a025f051a7cca7cb5ea029b43f05d016625097c5054dee7b524d452f83b57401464b222b70f22430e2454ba3
- SSDEEP 196608:5T8qdD66HtIto0ALojcIGoYeGZF6bUpMBF1p/kjRm4OWi2b+Tf4Tf7:ta6YokI+sIbUwF1VERmj2bycz
- TLSH T1F3279D2132F2253ED21F553D81398D36AA603C2A5BB2CE7B7040F9F91D62B55691BB33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables packed with MEW
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1