General
- Target 2026-08-04_d11e16a8457b8cdb97a892ab6c42ab3a_amadey_blackenergy_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry
- Size 9.1MB
- Sample260805-aj22natfjc
- SHA256 01615c94e86b7a298140e760b1d4b01714b611ca111ea6b173d9db3b3b7909de
- MD5 d11e16a8457b8cdb97a892ab6c42ab3a
- SHA1 b7c497567961a7003edf8dc938559e8aa80e18a2
- SHA512 fe1fe662d5c17c9700d60c7992572e339462d57d6cd5b79ec0b5694f3bd17b803c7686acca9e3e7df011e755772f9fc162cda496563b3bd4fa32d1c3411a5ceb
- SSDEEP 98304:VR77GBfW8yu0oAaldmdmnpJ6EWQtZ/K0tGOFWVRuLftCTH:XGBfW8yDKmd0H6EWyZ/K0ttYVAATH
- TLSH T149A66D13F2A841A9E066D174CE629631EB327C494BF1A5DF328076D92F73AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_d11e16a8457b8cdb97a892ab6c42ab3a_amadey_blackenergy_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_d11e16a8457b8cdb97a892ab6c42ab3a_amadey_blackenergy_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry
- Size 9.1MB
- SHA256 01615c94e86b7a298140e760b1d4b01714b611ca111ea6b173d9db3b3b7909de
- MD5 d11e16a8457b8cdb97a892ab6c42ab3a
- SHA1 b7c497567961a7003edf8dc938559e8aa80e18a2
- SHA512 fe1fe662d5c17c9700d60c7992572e339462d57d6cd5b79ec0b5694f3bd17b803c7686acca9e3e7df011e755772f9fc162cda496563b3bd4fa32d1c3411a5ceb
- SSDEEP 98304:VR77GBfW8yu0oAaldmdmnpJ6EWQtZ/K0tGOFWVRuLftCTH:XGBfW8yDKmd0H6EWyZ/K0ttYVAATH
- TLSH T149A66D13F2A841A9E066D174CE629631EB327C494BF1A5DF328076D92F73AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1