General
- Target 2026-08-19_ba5a08e4ace7d81b60a00cdfb5666f03_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stop_tofsee_vidar
- Size 16.7MB
- Sample260819-wddb1aep9w
- SHA256 1f002ec12ec7067998e1fe402fdebddfc9432737993615921b2b96eca6b9ad3e
- MD5 ba5a08e4ace7d81b60a00cdfb5666f03
- SHA1 7a0ec0c1597a5defbaaaef9c564e20bc1ac41b56
- SHA512 645dfd260fa2a18822c6c779386340011450819997316940202516f35b84ddff5269ae96b10a9bfb5c8c34970fe0b19963dee9ec5fb8a17d9ce4534128a1b788
- SSDEEP 196608:VS5X01cISdiqv66HtIto0AhoveGZF6bUpMBF1p/kjRm4OWi2b9oj:oRD/i6YoOHIbUwF1VERmj2bSj
- TLSH T1B007AE6072B3247CC21B8474865DDE37B9603C545BE14EBB6181FAF83F72994762AB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_ba5a08e4ace7d81b60a00cdfb5666f03_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_ba5a08e4ace7d81b60a00cdfb5666f03_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stop_tofsee_vidar
- Size 16.7MB
- SHA256 1f002ec12ec7067998e1fe402fdebddfc9432737993615921b2b96eca6b9ad3e
- MD5 ba5a08e4ace7d81b60a00cdfb5666f03
- SHA1 7a0ec0c1597a5defbaaaef9c564e20bc1ac41b56
- SHA512 645dfd260fa2a18822c6c779386340011450819997316940202516f35b84ddff5269ae96b10a9bfb5c8c34970fe0b19963dee9ec5fb8a17d9ce4534128a1b788
- SSDEEP 196608:VS5X01cISdiqv66HtIto0AhoveGZF6bUpMBF1p/kjRm4OWi2b9oj:oRD/i6YoOHIbUwF1VERmj2bSj
- TLSH T1B007AE6072B3247CC21B8474865DDE37B9603C545BE14EBB6181FAF83F72994762AB32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1