General
- Target 2026-08-22_76d4e900f91cb2d8ac591ad95cceb766_amadey_blackenergy_cloudeye_cobalt-strike_darkgate_elex_emotet_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_vidar_wannacry
- Size 9.1MB
- Sample260823-g5y1fsythy
- SHA256 66be8d5a4d7f3c957400123c21bbb3ad3cc38349d0f1d653de79516d8b37328b
- MD5 76d4e900f91cb2d8ac591ad95cceb766
- SHA1 5b09cbc6cec7bb27e0e028dba02fe52792d6fcc8
- SHA512 cf2b3c26f1310eb2174717ff2db82116b81c6691c14f619c18e210175758629d63fb4f07450841882cea21b0b276c791a63872bd7a980e6739ba7d516b6185b2
- SSDEEP 98304:Ul77GBfWTQlJDHj77GBfWUOd3KRuy5ae0LapIedvLapID6vjoA:EGBfWMlFHLGBfW7d3qP0cIedvcID67oA
- TLSH T1E3A64B12B2E10065F1A6A031CF66973497F23C658FF1C2BBA24572D92F73AC17A35726
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-22_76d4e900f91cb2d8ac591ad95cceb766_amadey_blackenergy_cloudeye_cobalt-strike_darkgate_elex_.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_76d4e900f91cb2d8ac591ad95cceb766_amadey_blackenergy_cloudeye_cobalt-strike_darkgate_elex_emotet_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_vidar_wannacry
- Size 9.1MB
- SHA256 66be8d5a4d7f3c957400123c21bbb3ad3cc38349d0f1d653de79516d8b37328b
- MD5 76d4e900f91cb2d8ac591ad95cceb766
- SHA1 5b09cbc6cec7bb27e0e028dba02fe52792d6fcc8
- SHA512 cf2b3c26f1310eb2174717ff2db82116b81c6691c14f619c18e210175758629d63fb4f07450841882cea21b0b276c791a63872bd7a980e6739ba7d516b6185b2
- SSDEEP 98304:Ul77GBfWTQlJDHj77GBfWUOd3KRuy5ae0LapIedvLapID6vjoA:EGBfWMlFHLGBfW7d3qP0cIedvcID67oA
- TLSH T1E3A64B12B2E10065F1A6A031CF66973497F23C658FF1C2BBA24572D92F73AC17A35726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1