General
- Target 2026-08-12_663081f93591f9fc2e9ef745832ec0da_akira_amadey_cloudeye_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_vidar
- Size 7.2MB
- Sample260812-qch8zagr7y
- SHA256 0b0056f37598cabc5b6282a1134c9d534370f595443d56c651359b4c1a90dd22
- MD5 663081f93591f9fc2e9ef745832ec0da
- SHA1 becd211314355a051f33bf6da61fa0b015acd179
- SHA512 f88a505b6f59041dd31d085ac52e580f1b986ea2d44576d4444c5eef3fdaa794a41262220caa1086cfa65149d5b1d93b71c3cc84dca19baae6ef8091e22bdd10
- SSDEEP 98304:GPQ2UgXq9ouFkULGyqobNq1MkWQtZ/K0tGOFWVRuLftCTj:OQ2S9+ULdN0WyZ/K0ttYVAATj
- TLSH T1F9768C13F7E440B9E06AD275CE3582219B72FC294BB1AADF234076D42E72AD17B39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_663081f93591f9fc2e9ef745832ec0da_akira_amadey_cloudeye_cobalt-strike_elex_hijackloader_ic.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_663081f93591f9fc2e9ef745832ec0da_akira_amadey_cloudeye_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_vidar
- Size 7.2MB
- SHA256 0b0056f37598cabc5b6282a1134c9d534370f595443d56c651359b4c1a90dd22
- MD5 663081f93591f9fc2e9ef745832ec0da
- SHA1 becd211314355a051f33bf6da61fa0b015acd179
- SHA512 f88a505b6f59041dd31d085ac52e580f1b986ea2d44576d4444c5eef3fdaa794a41262220caa1086cfa65149d5b1d93b71c3cc84dca19baae6ef8091e22bdd10
- SSDEEP 98304:GPQ2UgXq9ouFkULGyqobNq1MkWQtZ/K0tGOFWVRuLftCTj:OQ2S9+ULdN0WyZ/K0ttYVAATj
- TLSH T1F9768C13F7E440B9E06AD275CE3582219B72FC294BB1AADF234076D42E72AD17B39711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Shodi worm
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1