General
- Target 2026-08-04_99b7c746ce77fd3c602ee50eda43c3b6_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_redline-stealer_rhadamanthys_vidar
- Size 11.1MB
- Sample260805-aw2lnaba45
- SHA256 d6a7264b9cfebfcd7ac198f91dae2686807159442832f64126d07abc8fb4d403
- MD5 99b7c746ce77fd3c602ee50eda43c3b6
- SHA1 1cc29f0f26e428ea39a92fefced1ecc2c8364699
- SHA512 9f0555dadbcc3a073c2c11908afecf979a3e8674a6d6acf592a00ba3e3ead8752942a3db4951483ea05b9b48a048091e3c5ef51dd77faa63260c35387d002c45
- SSDEEP 98304:Va0oAaldmdmnpHdEkB/qoHMdnJE7hAlKnsz2C2PYdhIqHpnq0EHd66LLapI4:5Kmd0ZdYJEul4szEonqtHd66LcI4
- TLSH T1A7C68D32759180B5D2568030CF95AB75C3A5BC398BF245DB36807AEE6F722C13E35B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_99b7c746ce77fd3c602ee50eda43c3b6_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_99b7c746ce77fd3c602ee50eda43c3b6_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_redline-stealer_rhadamanthys_vidar
- Size 11.1MB
- SHA256 d6a7264b9cfebfcd7ac198f91dae2686807159442832f64126d07abc8fb4d403
- MD5 99b7c746ce77fd3c602ee50eda43c3b6
- SHA1 1cc29f0f26e428ea39a92fefced1ecc2c8364699
- SHA512 9f0555dadbcc3a073c2c11908afecf979a3e8674a6d6acf592a00ba3e3ead8752942a3db4951483ea05b9b48a048091e3c5ef51dd77faa63260c35387d002c45
- SSDEEP 98304:Va0oAaldmdmnpHdEkB/qoHMdnJE7hAlKnsz2C2PYdhIqHpnq0EHd66LLapI4:5Kmd0ZdYJEul4szEonqtHd66LcI4
- TLSH T1A7C68D32759180B5D2568030CF95AB75C3A5BC398BF245DB36807AEE6F722C13E35B26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1