General
- Target 2026-08-04_55499373ce4302b101f7e07ea43bb29e_amadey_elex_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 10.5MB
- Sample260804-yzehasdn4y
- SHA256 ab3bd66e06bcee79e9bd099d929de67cb15a236a1f343868d7baab20e131df49
- MD5 55499373ce4302b101f7e07ea43bb29e
- SHA1 8f46b1081f643e906217d811dad2e9e5b2ace057
- SHA512 32b8d36b65e796c936d50a57d61b4385e42b5faff5760eb5d39a82aca7c6e87e699c29a7e3800f7267b9ce020433497a4916f0c99d95d50a54b79185719ee90e
- SSDEEP 196608:Qdn2S9+ULdNPhdm66HtItoNoYeGZF6bUpMBF1p/kd:E2SlLdNPT6YoCsIbUwF1VQ
- TLSH T10EB6BE60B7B3347DC31B5975406CDE33B82478142B118FFB5289DA742E065A6AE3BB72
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_55499373ce4302b101f7e07ea43bb29e_amadey_elex_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_55499373ce4302b101f7e07ea43bb29e_amadey_elex_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 10.5MB
- SHA256 ab3bd66e06bcee79e9bd099d929de67cb15a236a1f343868d7baab20e131df49
- MD5 55499373ce4302b101f7e07ea43bb29e
- SHA1 8f46b1081f643e906217d811dad2e9e5b2ace057
- SHA512 32b8d36b65e796c936d50a57d61b4385e42b5faff5760eb5d39a82aca7c6e87e699c29a7e3800f7267b9ce020433497a4916f0c99d95d50a54b79185719ee90e
- SSDEEP 196608:Qdn2S9+ULdNPhdm66HtItoNoYeGZF6bUpMBF1p/kd:E2SlLdNPT6YoCsIbUwF1VQ
- TLSH T10EB6BE60B7B3347DC31B5975406CDE33B82478142B118FFB5289DA742E065A6AE3BB72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1