General
- Target 2026-08-03_a11d05cb66e649f34acd7ea4caa29ee4_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 18.8MB
- Sample260804-mjnv9attfs
- SHA256 0a576b1f97bb8161e88279068f19afa1ecbc5c5686c17f59e578d0f6afd991fb
- MD5 a11d05cb66e649f34acd7ea4caa29ee4
- SHA1 3db0dd46c58903455fcb6e3968dd3c44ee96a902
- SHA512 ddaf6a0a90fbbd6ceb6a98650b5c6890453667853fb6e87042d2814fac92cdbd40e8eadace6aa0fa456982621a20fc2310935ef06c4310bfdde976ca2b92c84b
- SSDEEP 196608:5T8qdD66HtIto0ALojcIGoYeGZF6bUpMBF1p/kjRm4OWi2b+Tf+P1:ta6YokI+sIbUwF1VERmj2byw
- TLSH T12B17AF1172B3257DC21F8539C1698D37BA703C295BB18EBB6044F6F42D22B95692BB33
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_a11d05cb66e649f34acd7ea4caa29ee4_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a11d05cb66e649f34acd7ea4caa29ee4_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 18.8MB
- SHA256 0a576b1f97bb8161e88279068f19afa1ecbc5c5686c17f59e578d0f6afd991fb
- MD5 a11d05cb66e649f34acd7ea4caa29ee4
- SHA1 3db0dd46c58903455fcb6e3968dd3c44ee96a902
- SHA512 ddaf6a0a90fbbd6ceb6a98650b5c6890453667853fb6e87042d2814fac92cdbd40e8eadace6aa0fa456982621a20fc2310935ef06c4310bfdde976ca2b92c84b
- SSDEEP 196608:5T8qdD66HtIto0ALojcIGoYeGZF6bUpMBF1p/kjRm4OWi2b+Tf+P1:ta6YokI+sIbUwF1VERmj2byw
- TLSH T12B17AF1172B3257DC21F8539C1698D37BA703C295BB18EBB6044F6F42D22B95692BB33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables packed with MEW
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1