General
- Target 2026-08-06_329d5957c93bbbf642c2173d1a55f216_amadey_blackenergy_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_vidar_wannacry
- Size 14.3MB
- Sample260806-3beklsshja
- SHA256 43682e4cd1368942c354b43039001a828e5056cb01c82ba8f5d740638315993c
- MD5 329d5957c93bbbf642c2173d1a55f216
- SHA1 b0753c493c43f147c42646bc2af05297e648b50f
- SHA512 38d35d60672311f6f81da5ec9831558fcaccac37e9b342b6826fda486b1d04066c7761b07ce5b8f3a238433cc0888acefc0e4d4497b255d50e75cd784c9144c8
- SSDEEP 196608:XGBfWHDiR+bdDKmd0hd718UvcIVeGZF6bUpMBF1p/kjRm4OWi2b1:sWjiR+4qkYwIbUwF1VERmj2b1
- TLSH T137E6BF12B2E100A9D1AAD134CF65823197B27C694BF5D2EF228472D92F73AD07F39716
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-06_329d5957c93bbbf642c2173d1a55f216_amadey_blackenergy_cobalt-strike_elex_glassworm_hijacklo.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_329d5957c93bbbf642c2173d1a55f216_amadey_blackenergy_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_vidar_wannacry
- Size 14.3MB
- SHA256 43682e4cd1368942c354b43039001a828e5056cb01c82ba8f5d740638315993c
- MD5 329d5957c93bbbf642c2173d1a55f216
- SHA1 b0753c493c43f147c42646bc2af05297e648b50f
- SHA512 38d35d60672311f6f81da5ec9831558fcaccac37e9b342b6826fda486b1d04066c7761b07ce5b8f3a238433cc0888acefc0e4d4497b255d50e75cd784c9144c8
- SSDEEP 196608:XGBfWHDiR+bdDKmd0hd718UvcIVeGZF6bUpMBF1p/kjRm4OWi2b1:sWjiR+4qkYwIbUwF1VERmj2b1
- TLSH T137E6BF12B2E100A9D1AAD134CF65823197B27C694BF5D2EF228472D92F73AD07F39716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1