General
- Target 2026-10-11_86efb568db4d0bf6ac0f814cf3ba0646_amadey_blankgrabber_cobalt-strike_elex_floxif_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 810KB
- Sample261012-vkmctavt5p
- SHA256 ee1f3e41cad5a14555091cca93db1d282cedb6a77d43aed0850346793700e312
- MD5 86efb568db4d0bf6ac0f814cf3ba0646
- SHA1 9a301f0ce51eb9921579dcc4865ab4ae8ded1476
- SHA512 ba335296809ab9b993019e981ad6fcb3b9f7211e09fb1dcc04320d8faadd7d240922f38406e2ed14acf204150595a7dab129490909d14fec030c44d479a5b773
- SSDEEP 24576:QPdp9Mmqk/OUENOkBWmcLbA5HYgOrEH7Kc9:agk/OUJkBWfXA5Ygow
- TLSH T12E05D1223DD1C1BAD1336170591DC718A6BAF8390A3A59C7B7CC229D6F345C18F25BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-11_86efb568db4d0bf6ac0f814cf3ba0646_amadey_blankgrabber_cobalt-strike_elex_floxif_glassworm_.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_86efb568db4d0bf6ac0f814cf3ba0646_amadey_blankgrabber_cobalt-strike_elex_floxif_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 810KB
- SHA256 ee1f3e41cad5a14555091cca93db1d282cedb6a77d43aed0850346793700e312
- MD5 86efb568db4d0bf6ac0f814cf3ba0646
- SHA1 9a301f0ce51eb9921579dcc4865ab4ae8ded1476
- SHA512 ba335296809ab9b993019e981ad6fcb3b9f7211e09fb1dcc04320d8faadd7d240922f38406e2ed14acf204150595a7dab129490909d14fec030c44d479a5b773
- SSDEEP 24576:QPdp9Mmqk/OUENOkBWmcLbA5HYgOrEH7Kc9:agk/OUJkBWfXA5Ygow
- TLSH T12E05D1223DD1C1BAD1336170591DC718A6BAF8390A3A59C7B7CC229D6F345C18F25BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Floxif payload
-
UPX dump on OEP (original entry point)
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL