General
- Target 2026-08-28_14f2fa3332446c69f309612fdeb1271e_akira_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 17.3MB
- Sample260828-1bvkqaeb93
- SHA256 54720861e8ef2aaea9874bb8d78354ebc6eaa20f197268cabe851d3e9a0b2565
- MD5 14f2fa3332446c69f309612fdeb1271e
- SHA1 3d732372847dcbdae02cfa96600a5b5bee13f5b9
- SHA512 46a63867fedd7341bd99ace9f964c6db6192d3e79f85ea776ae78276cbbe543390cf80a02b56fd338d9ad37757750cc380fa45f36675e4c548dd14a0b124eff1
- SSDEEP 393216:2IajTHNBpu1Qfc0I6IajTHNBpu1Qfc0Ip:cHNBpu1Qfc0IIHNBpu1Qfc0Ip
- TLSH T18307181166D98FECC05F9474CE0AA6A569237C468F209FDF1980BE293E756F05E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-28_14f2fa3332446c69f309612fdeb1271e_akira_amadey_cobalt-strike_darkgate_elex_hijackloader_ic.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_14f2fa3332446c69f309612fdeb1271e_akira_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 17.3MB
- SHA256 54720861e8ef2aaea9874bb8d78354ebc6eaa20f197268cabe851d3e9a0b2565
- MD5 14f2fa3332446c69f309612fdeb1271e
- SHA1 3d732372847dcbdae02cfa96600a5b5bee13f5b9
- SHA512 46a63867fedd7341bd99ace9f964c6db6192d3e79f85ea776ae78276cbbe543390cf80a02b56fd338d9ad37757750cc380fa45f36675e4c548dd14a0b124eff1
- SSDEEP 393216:2IajTHNBpu1Qfc0I6IajTHNBpu1Qfc0Ip:cHNBpu1Qfc0IIHNBpu1Qfc0Ip
- TLSH T18307181166D98FECC05F9474CE0AA6A569237C468F209FDF1980BE293E756F05E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1