General
- Target 2026-08-19_f50c118ed7121d9e925d4325f32b4724_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar_wannacry
- Size 10.3MB
- Sample260819-vb5g2agc57
- SHA256 1725d853d9b3fa9b001ba67996453ebb0502e052725de0352ffe26a3659d78fa
- MD5 f50c118ed7121d9e925d4325f32b4724
- SHA1 c4646184a8e0865fe1c8b1dfe8a00cb68cb79ed5
- SHA512 918abf9b95098f1627507837e39def978d3618e77c4b5e152de006e439a12abc75ff5f218258237224321cec885ac06bfdfdfbecacd46d4abb0d8a046966bf3e
- SSDEEP 98304:VHRULKRuy5aYfd/WPnUm8UpjoEHRULKRuy5aYfd/WPnUm8UpjofkeI1i:1WLqbd/WP18UdoSWLqbd/WP18Udocxi
- TLSH T178B68D13F6A442B5D07BD075C6969676EA723C510B30A6CF0394B76D2E33BD09B3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_f50c118ed7121d9e925d4325f32b4724_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_f50c118ed7121d9e925d4325f32b4724_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_tofsee_vidar_wannacry
- Size 10.3MB
- SHA256 1725d853d9b3fa9b001ba67996453ebb0502e052725de0352ffe26a3659d78fa
- MD5 f50c118ed7121d9e925d4325f32b4724
- SHA1 c4646184a8e0865fe1c8b1dfe8a00cb68cb79ed5
- SHA512 918abf9b95098f1627507837e39def978d3618e77c4b5e152de006e439a12abc75ff5f218258237224321cec885ac06bfdfdfbecacd46d4abb0d8a046966bf3e
- SSDEEP 98304:VHRULKRuy5aYfd/WPnUm8UpjoEHRULKRuy5aYfd/WPnUm8UpjofkeI1i:1WLqbd/WP18UdoSWLqbd/WP18Udocxi
- TLSH T178B68D13F6A442B5D07BD075C6969676EA723C510B30A6CF0394B76D2E33BD09B3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1