General
- Target 2026-08-21_6d96ff40bebabc577a55a9555e709fe7_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stop_tofsee_vidar
- Size 16.6MB
- Sample260822-qd3c8svbrf
- SHA256 6b8001a43502c716dd35e8657b3dae248f4176fa87d996c92ea85a1ff98f6aba
- MD5 6d96ff40bebabc577a55a9555e709fe7
- SHA1 255f68f871587b19ba8aa6f7b985656809f5fa69
- SHA512 eaf578f672ad8b0fc923456becb878afb824f06439af6c85309af1e195b070ff3c942de7e64c167c068e6dfd01ff23bda9e2b42bf26a10d42acf7cf3e1a3e330
- SSDEEP 196608:VS5X01cISdiqv66HtIto0AhoveGZF6bUpMBF1p/kjRm4OWi2b9oyN:oRD/i6YoOHIbUwF1VERmj2bSA
- TLSH T19807AE6072B3247CC31B9474865DDE73B9603C545BE14EBB6181FAF82E32994762BB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_6d96ff40bebabc577a55a9555e709fe7_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_6d96ff40bebabc577a55a9555e709fe7_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stop_tofsee_vidar
- Size 16.6MB
- SHA256 6b8001a43502c716dd35e8657b3dae248f4176fa87d996c92ea85a1ff98f6aba
- MD5 6d96ff40bebabc577a55a9555e709fe7
- SHA1 255f68f871587b19ba8aa6f7b985656809f5fa69
- SHA512 eaf578f672ad8b0fc923456becb878afb824f06439af6c85309af1e195b070ff3c942de7e64c167c068e6dfd01ff23bda9e2b42bf26a10d42acf7cf3e1a3e330
- SSDEEP 196608:VS5X01cISdiqv66HtIto0AhoveGZF6bUpMBF1p/kjRm4OWi2b9oyN:oRD/i6YoOHIbUwF1VERmj2bSA
- TLSH T19807AE6072B3247CC31B9474865DDE73B9603C545BE14EBB6181FAF82E32994762BB32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1