General
- Target 2026-08-28_5d6b71c3640e8781945367b4fd85d272_akira_amadey_cobalt-strike_darkgate_elex_icedid_njrat_smoke-loader_stealc_vidar
- Size 7.0MB
- Sample260828-tey9razwcw
- SHA256 e66e89a12eff60432932e6255fb5687a501019670e3ed281c88307034464de00
- MD5 5d6b71c3640e8781945367b4fd85d272
- SHA1 d382c2db1bb9daedafa5e7aad1783065f35b92ac
- SHA512 f7daf04f2f93ca5b16bd3391b07c63fc51a5aa9c01be205e9aa6f3bfeff30093ba56e3a572daf5438fcaaa757fcd46b57354a5785953e4dd003dd1ce076071e5
- SSDEEP 98304:XMca335GjnMca334bKUgTH2M2m9UMpu1QfLczqssnKSS:2IaYgTH2qBpu1QfLIqsufS
- TLSH T15F766D12669E14ACD19AD874CB4F8A56AE3074960B31B9EF42C0A1393F767F46F3C316
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-28_5d6b71c3640e8781945367b4fd85d272_akira_amadey_cobalt-strike_darkgate_elex_icedid_njrat_smoke-loader_stealc_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_5d6b71c3640e8781945367b4fd85d272_akira_amadey_cobalt-strike_darkgate_elex_icedid_njrat_smoke-loader_stealc_vidar
- Size 7.0MB
- SHA256 e66e89a12eff60432932e6255fb5687a501019670e3ed281c88307034464de00
- MD5 5d6b71c3640e8781945367b4fd85d272
- SHA1 d382c2db1bb9daedafa5e7aad1783065f35b92ac
- SHA512 f7daf04f2f93ca5b16bd3391b07c63fc51a5aa9c01be205e9aa6f3bfeff30093ba56e3a572daf5438fcaaa757fcd46b57354a5785953e4dd003dd1ce076071e5
- SSDEEP 98304:XMca335GjnMca334bKUgTH2M2m9UMpu1QfLczqssnKSS:2IaYgTH2qBpu1QfLIqsufS
- TLSH T15F766D12669E14ACD19AD874CB4F8A56AE3074960B31B9EF42C0A1393F767F46F3C316
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1