General
- Target 2026-08-04_aeb81f4009702bdae01805f3ef90c29f_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_njrat_smoke-loader_stealc_vidar
- Size 17.7MB
- Sample260805-asqd8athrc
- SHA256 fca571bdc8cc667dcefd17cafc06b45e230963a82e82ebbdce0947c2559de336
- MD5 aeb81f4009702bdae01805f3ef90c29f
- SHA1 2b5c2e2a067474f21979732b413e2063dd8caa10
- SHA512 cbc2c78608f98a4ba6a99fff01d260bcfbaa18935ee9610ef0db84fac20b35fd0336e2b21a0adb28cdd9e4e1e0fe75f658911510052960730120e29318962f64
- SSDEEP 196608:2IcKmd0NKmd0wqVPN6aIcKmd0NKmd0wqVPN68:2ILqRqwSaILqRqwS8
- TLSH T1F0177C03F2A845A6D066D074CE4AD675EB323C494BF155EF3280B6E92E33AD07B39725
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_aeb81f4009702bdae01805f3ef90c29f_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_n.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_aeb81f4009702bdae01805f3ef90c29f_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_njrat_smoke-loader_stealc_vidar
- Size 17.7MB
- SHA256 fca571bdc8cc667dcefd17cafc06b45e230963a82e82ebbdce0947c2559de336
- MD5 aeb81f4009702bdae01805f3ef90c29f
- SHA1 2b5c2e2a067474f21979732b413e2063dd8caa10
- SHA512 cbc2c78608f98a4ba6a99fff01d260bcfbaa18935ee9610ef0db84fac20b35fd0336e2b21a0adb28cdd9e4e1e0fe75f658911510052960730120e29318962f64
- SSDEEP 196608:2IcKmd0NKmd0wqVPN6aIcKmd0NKmd0wqVPN68:2ILqRqwSaILqRqwS8
- TLSH T1F0177C03F2A845A6D066D074CE4AD675EB323C494BF155EF3280B6E92E33AD07B39725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1