General
- Target 2026-09-03_c5fbbc591dd37ceb9cce7c828f43fb60_amadey_blackenergy_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_stop_vidar
- Size 21.4MB
- Sample260905-1glj1atane
- SHA256 c4e47cce1fca80701fdac607341f96e94ed8a122d533dc85d7412befab5e5d60
- MD5 c5fbbc591dd37ceb9cce7c828f43fb60
- SHA1 6c6f9fcafcfef13c236296630331dcbb058b23ce
- SHA512 ffbbc0589f135355cae539224fed5baded3298c1104ff4035d978bcfda68ca0f881730805921aea142172305e6e6b1287c5178863e79780d4502fc34ab79848b
- SSDEEP 393216:FWe8tuElyZ/K0ttYZTIWe8tuElyZ/K0ttYZTiQyZ/K0ttYZTs:1ElyZ/K0ttYZTmElyZ/K0ttYZTiQyZ/H
- TLSH T102376C03F2E441A9E0BBD274CA729621EB727C564BB1A5DF224472D51F33AD07B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-03_c5fbbc591dd37ceb9cce7c828f43fb60_amadey_blackenergy_cobalt-strike_elex_glassworm_hijacklo.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_c5fbbc591dd37ceb9cce7c828f43fb60_amadey_blackenergy_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_stop_vidar
- Size 21.4MB
- SHA256 c4e47cce1fca80701fdac607341f96e94ed8a122d533dc85d7412befab5e5d60
- MD5 c5fbbc591dd37ceb9cce7c828f43fb60
- SHA1 6c6f9fcafcfef13c236296630331dcbb058b23ce
- SHA512 ffbbc0589f135355cae539224fed5baded3298c1104ff4035d978bcfda68ca0f881730805921aea142172305e6e6b1287c5178863e79780d4502fc34ab79848b
- SSDEEP 393216:FWe8tuElyZ/K0ttYZTIWe8tuElyZ/K0ttYZTiQyZ/K0ttYZTs:1ElyZ/K0ttYZTmElyZ/K0ttYZTiQyZ/H
- TLSH T102376C03F2E441A9E0BBD274CA729621EB727C564BB1A5DF224472D51F33AD07B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1