General
- Target 2026-08-25_9a6c6b2716d42d42ffaeb8493cb2ecce_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader_vidar
- Size 6.9MB
- Sample260826-tlavqsfr2s
- SHA256 3eed42fea6f301d8aede9c1fbd1b8d422dd924096af8fab20d58c7e40636d76a
- MD5 9a6c6b2716d42d42ffaeb8493cb2ecce
- SHA1 1d1002cf6c0cee095c9c51021cce01d217c76902
- SHA512 2f5f6fd7c6a6ae221b37c10c456221e2d3a053482523373454d28688aa5798a47128c101fdbbc95406093c570afd0d5ca5c528ceb1dd34c130152cb7ff30226a
- SSDEEP 98304:VKR2UgXq9ouFkULGyqobNq1MfXWQtZ/K0tGOFWVRuLftCTZ:C2S9+ULdNPXWyZ/K0ttYVAATZ
- TLSH T1B3768C13F7E440A9E05AD275CE3582219B72FC694BF1AADF234036D42E72AC17B39761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_9a6c6b2716d42d42ffaeb8493cb2ecce_amadey_cobalt-strike_elex_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_9a6c6b2716d42d42ffaeb8493cb2ecce_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader_vidar
- Size 6.9MB
- SHA256 3eed42fea6f301d8aede9c1fbd1b8d422dd924096af8fab20d58c7e40636d76a
- MD5 9a6c6b2716d42d42ffaeb8493cb2ecce
- SHA1 1d1002cf6c0cee095c9c51021cce01d217c76902
- SHA512 2f5f6fd7c6a6ae221b37c10c456221e2d3a053482523373454d28688aa5798a47128c101fdbbc95406093c570afd0d5ca5c528ceb1dd34c130152cb7ff30226a
- SSDEEP 98304:VKR2UgXq9ouFkULGyqobNq1MfXWQtZ/K0tGOFWVRuLftCTZ:C2S9+ULdNPXWyZ/K0ttYVAATZ
- TLSH T1B3768C13F7E440A9E05AD275CE3582219B72FC694BF1AADF234036D42E72AC17B39761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1