General
- Target 2026-10-05_986996b77879e0e8010e550eea67af3b_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 17.8MB
- Sample261006-xpqbdafx2n
- SHA256 d42b72c110c47109425ef2a6e066987a5eeb98c690d05a1c8dcf0cd9fc812190
- MD5 986996b77879e0e8010e550eea67af3b
- SHA1 9d32c51ac041e2f142f4c7e26173c8f7c5995d33
- SHA512 5a8f5acd34a35e446a33e6bc796aa74622fa089ae81ea1925413f1de4360ecb67afe339e75e84da28dd56f5d180c9863a5659cddd7f0dc5732decb6bc3d856dd
- SSDEEP 196608:1j5VPfoYj5VPfoxaj5VPfoYj5VPfoxDqz:nVPg2VPgWVPg2VPgMz
- TLSH T13617D42166E4CFE1D06F5070DC66B6F69127AD20CF654FCB2E807E1939316D2AA31A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-05_986996b77879e0e8010e550eea67af3b_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_l.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-05_986996b77879e0e8010e550eea67af3b_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 17.8MB
- SHA256 d42b72c110c47109425ef2a6e066987a5eeb98c690d05a1c8dcf0cd9fc812190
- MD5 986996b77879e0e8010e550eea67af3b
- SHA1 9d32c51ac041e2f142f4c7e26173c8f7c5995d33
- SHA512 5a8f5acd34a35e446a33e6bc796aa74622fa089ae81ea1925413f1de4360ecb67afe339e75e84da28dd56f5d180c9863a5659cddd7f0dc5732decb6bc3d856dd
- SSDEEP 196608:1j5VPfoYj5VPfoxaj5VPfoYj5VPfoxDqz:nVPg2VPgWVPg2VPgMz
- TLSH T13617D42166E4CFE1D06F5070DC66B6F69127AD20CF654FCB2E807E1939316D2AA31A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables packed with MEW
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1