General
- Target 2026-09-06_b1e494fa52e748316998a920f24f8500_amadey_elex_hijackloader_luca-stealer_njrat_vidar_wannacry
- Size 17.0MB
- Sample260906-ys52nsda97
- SHA256 d57ffab5f955d76b1d147edb1c6a20680cbf5a2e95b89a0a8665a2e5e661eeca
- MD5 b1e494fa52e748316998a920f24f8500
- SHA1 582274146960a47bfde6e0d1e7804fd4432bdc38
- SHA512 42430d2a07772a5c3dcbacb65f9e1e0ec9a9fd644d1ff7aeb0e7db878d30cecb5d70a2d0e330d5f8cf1533374b5b6deb84dbf8f5b515cb56b468cbf89ae6c409
- SSDEEP 49152:U+EnG+EnK+ES+ES+Ena+ES+EnG+EnK+ES+ES+EnG+EnK+ES+ES+EnX+ES+EnG+E2:9+4jn
- TLSH T1F1074A09F94340B1D92B10B04DCBD2BF8A60BF2587128EE7F78DDB5B7932BA16438655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_b1e494fa52e748316998a920f24f8500_amadey_elex_hijackloader_luca-stealer_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_b1e494fa52e748316998a920f24f8500_amadey_elex_hijackloader_luca-stealer_njrat_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_b1e494fa52e748316998a920f24f8500_amadey_elex_hijackloader_luca-stealer_njrat_vidar_wannacry
- Size 17.0MB
- SHA256 d57ffab5f955d76b1d147edb1c6a20680cbf5a2e95b89a0a8665a2e5e661eeca
- MD5 b1e494fa52e748316998a920f24f8500
- SHA1 582274146960a47bfde6e0d1e7804fd4432bdc38
- SHA512 42430d2a07772a5c3dcbacb65f9e1e0ec9a9fd644d1ff7aeb0e7db878d30cecb5d70a2d0e330d5f8cf1533374b5b6deb84dbf8f5b515cb56b468cbf89ae6c409
- SSDEEP 49152:U+EnG+EnK+ES+ES+Ena+ES+EnG+EnK+ES+ES+EnG+EnK+ES+ES+EnX+ES+EnG+E2:9+4jn
- TLSH T1F1074A09F94340B1D92B10B04DCBD2BF8A60BF2587128EE7F78DDB5B7932BA16438655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1