General
- Target 2026-10-21_7d99c9991e2d9486064fc2317d7bcc1d_amadey_elex_play
- Size 1.5MB
- Sample261022-ythb1atxdz
- SHA256 844287807b4db03c5db77d6d4d0f8b00773f055bdcb89408c1d9d8ff27e7c3dc
- MD5 7d99c9991e2d9486064fc2317d7bcc1d
- SHA1 c170914e49b37fca2f8ede682a9d7d5a453361e3
- SHA512 f3d7bd7adab3e182617de97a1a0e062f06a73983a305c8eb19f09cd3f2c766acc5ff8f4db6fda35909233361d532c65bfc7a9d9548b70b403de5f64ae4e974a8
- SSDEEP 24576:paArVXsMvxub8IIR6i7KlaadbU0IOW0weCvx0ltZbfnQ/tbw/2Mkjy6Fr7g0oB:paC8GxubdNNVdb9IPKfQ/lFTjN4
- TLSH T197651212BAE8912AF1B38F3118745766B07B7CA0DF3A9B6E1B8021AD1D31550DE70B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-21_7d99c9991e2d9486064fc2317d7bcc1d_amadey_elex_play.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_7d99c9991e2d9486064fc2317d7bcc1d_amadey_elex_play
- Size 1.5MB
- SHA256 844287807b4db03c5db77d6d4d0f8b00773f055bdcb89408c1d9d8ff27e7c3dc
- MD5 7d99c9991e2d9486064fc2317d7bcc1d
- SHA1 c170914e49b37fca2f8ede682a9d7d5a453361e3
- SHA512 f3d7bd7adab3e182617de97a1a0e062f06a73983a305c8eb19f09cd3f2c766acc5ff8f4db6fda35909233361d532c65bfc7a9d9548b70b403de5f64ae4e974a8
- SSDEEP 24576:paArVXsMvxub8IIR6i7KlaadbU0IOW0weCvx0ltZbfnQ/tbw/2Mkjy6Fr7g0oB:paC8GxubdNNVdb9IPKfQ/lFTjN4
- TLSH T197651212BAE8912AF1B38F3118745766B07B7CA0DF3A9B6E1B8021AD1D31550DE70B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1