Hostile 100% Download

2026-10-01_751e96b9fab558d1db120dfdcbe92307_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_smoke-loader_stealc_vidar

FuTuRaX virus, C2, injection

FuTuRaX Delphi file-infector identityFuTuRaX carrier stacks delimiter-separated PE host images
SHA-256f508182a94c137420b7c93571937a34c6fedf624a7028ce518876815bea12cbd
URLhttps://tria.ge/api/v0/samples/261002-nzz4wszdnf/sample
MaleculeK₂(McLi)O₇(C₂Er₇IAs₉P₄AlDy)H₉(Cm₆CrDbDsF₅Mg₂Os₁₂Po₁₄Ti)Md₄(Bi₈Si)Th

Evidence

MEW executable-packer section 0xf80–0x1270
⋯7 more rows
0xff000000000000000000000000000000000................
0x1000041040000a06537472696e67ff254491[email protected].%D.
0x101040008bc0ff25409140008bc0ff253c91@....%@.@....%<.
0x102040008bc0ff25389140008bc0ff253491@....%8.@....%4.
0x103040008bc0ff25309140008bc0ff252c91@....%0.@....%,.
0x104040008bc0ff25289140008bc0ff252491@....%(.@....%$.
0x105040008bc0ff25209140008bc0ff251c91@....% .@....%..
0x106040008bc0ff25189140008bc0ff255491@....%..@....%T.
0x107040008bc0ff25149140008bc0ff255091@....%..@....%P.
0x108040008bc0ff25109140008bc0ff250c91@....%..@....%..
0x109040008bc0ff25089140008bc0ff250491@....%..@....%..
0x10a040008bc0ff25009140008bc0ff25fc90@....%..@....%..
0x10b040008bc0ff25f89040008bc0ff256491@....%..@....%d.
0x10c040008bc0ff25609140008bc0ff255c91@....%`.@....%\.
0x10d040008bc0ff256c9140008bc0ff25f490@....%l.@....%..
0x10e040008bc0ff25f09040008bc0ff25ec90@....%..@....%..
0x10f040008bc0ff25e89040008bc05383c4bc@....%[email protected]...
0x1100bb0a00000054e8a1fffffff644242c01.....T......D$,.
0x111074050fb75c24308bc383c4445bc38bc0t...\$0....D[...
0x1120ff25e49040008bc0ff25e09040008bc0.%..@....%..@...
0x1130ff25dc9040008bc0ff25d89040008bc0.%..@....%..@...
0x1140ff25d49040008bc0ff25d09040008bc0.%..@....%..@...
0x1150ff25cc9040008bc0ff25c89040008bc0.%..@....%..@...
0x11605356bed0854000833e00753a68440600SV...@..>.u:hD..
0x1170006a00e8a8ffffff8bc885c9750533c0.j..........u.3.
0x11805e5bc3a1cc8540008901890dcc854000^[....@.......@.
0x119033d28bc203c08d44c1048b1e891889063......D........
0x11a04283fa6475ec8b068b1089165e5bc390B..du.......^[..
0x11b08900894004c38bc053568bf28bd8e89d[email protected]......
0x11c0ffffff85c0750533c05e5bc38b168950.....u.3.^[....P
0x11d0088b560489500c8b1389108958048942..V..P......X..B
0x11e0048903b0015e5bc38b50048b08890a89.....^[..P......
0x11f051048b15d08540008910a3d0854000c3Q.....@......@..
0x120053565755518bf18914248be88b5d008bSVWUQ....$...]..
0x121004248b1089168b50048956048b3b8b06.$.....P..V..;..
0x12208b530803530c3bc275148bc3e8b7ffff.S..S.;.u.......
0x1230ff8b430889068b430c014604eb150346..C....C..F....F
0x1240043b4308750d8bc3e89bffffff8b430c.;C.u.........C.
0x12500146048bdf3beb75c38bd68bc5e856ff.F...;.u......V.
0x1260ffff84c0750433c089065a5d5f5e5bc3....u.3...Z]_^[.
0x12705356575583c4f88bd88bfb8b328b4308SVWU........2.C.
FuTuRaX installed executable name 0x4e54–0x4fd4
0x4e54ffffebf08bc35b595dc38bc0558bec33......[Y]...U..3
0x4e64c05568b94e400064ff30648920ff05e8[email protected]. ...
0x4e748740007532b8e4874000e82de8ffffb8[email protected][email protected]....
0x4e84e0874000e823e8ffffb8dc874000e819..@..#......@...
0x4e94e8ffffb8d8874000e80fe8ffffb8d487......@.........
0x4ea44000e805e8ffff33c05a595964891068@......3.ZYYd..h
0x4eb4c04e4000c3e98ee2ffffebf85dc38bc0.N@.........]...
0x4ec4832de887400001c3ffffffff0b000000.-..@...........
0x4ed4667574757261782e6578650053565755futurax.exe.SVWU
0x4ee481c48cfaffff8dbc24740100008d6c24........$t....l$
0x4ef408c605f0874000016a006a026a02e859[email protected]
0x4f04f5ffff8bf083feff0f843a0100008d84..........:.....
0x4f142454010000ba10000000e83df4ffff66$T.........=...f
0x4f24c784245401000002006a45e8ecf4ffff..$T.....jE.....
0x4f34668984245601000033c0898424580100f..$V...3...$X..
0x4f44006a108d8424580100005056e8a3f4ff.j...$X...PV....
0x4f54ff85c00f85ef000000c7042410000000...........$....
0x4f64548d842468010000506a006800020000T..$h...Pj.h....
0x4f748d8424840300005056e8bef4ffff85c0..$....PV.......
0x4f840f8ec200000033db8b15148840008bc5......3.....@...
0x4f94e86fdaffffa110754000c60000ba0100.o.....u@.......
0x4fa400008bc5e813ddffffe82ad6ffff85c0..........*.....
0x4fb40f85a6000000436a03e85ef4ffff24ff......Cj..^...$.
0x4fc488076a03e853f4ffff66c1e808884701..j..S...f....G.
0x4fd453e846f4ffff24ff884702 S.F...$..G.
FuTuRaX virus author banner 0x618c–0x632c
0x618ce8464000f8454000c44e4000604e4000[email protected]@..N@.`N@.
0x619c0000000020614000558bec83c4f0b854.... [email protected]
0x61ac614000e8d4dfffff33c05568f5614000[email protected]@.
0x61bc64ff30648920b8ec874000ba0c624000d.0d. [email protected]@.
0x61cce833d5ffff6a006834624000e85fe1ff.3...j.h4b@.._..
0x61dcffe862feffffe8b9f8ffff33c05a5959..b........3.ZYY
0x61ec64891068fc614000c3e952cfffffebf8[email protected].....
0x61fce8bfd3ffff000000ffffffff26000000............&...
0x620c46756c6c2044656c7068692056697275Full Delphi Viru
0x621c732f576f726d206d6164652042792046s/Worm made By F
0x622c7554755261580000433a5c50726f6772uTuRaX..C:\Progr
0x623c616d2046696c65735c496e7465726e65am Files\Interne
0x624c74204578706c6f7265725c494558504ct Explorer\IEXPL
0x625c4f5245203231322e33332e3233372e38ORE 212.33.237.8
0x626c362f696d616765732f312f7265706f726/images/1/repor
0x627c742e7068700000000000000000000000t.php...........
0x628c00000000000000000000000000000000................
0x629c00000000000000000000000000000000................
0x62ac00000000000000000000000000000000................
0x62bc00000000000000000000000000000000................
0x62cc00000000000000000000000000000000................
0x62dc00000000000000000000000000000000................
0x62ec00000000000000000000000000000000................
0x62fc00000000000000000000000000000000................
0x630c00000000000000000000000000000000................
0x631c00000000000000000000000000000000................
0x632c000000000000 ......
Four or more embedded standard PE images 0x11cfe–0x11fee
⋯7 more rows
0x11d6e59b8a113ed234d176236250000000000Y....#M.b6%.....
0x11d7e21da400000a0400008a04000b0704000!.@...@[email protected]@.
0x11d8e10b04000000000000000000000000000..@.............
⋯10 more rows
0x11e3e450049004e0046004f006b65726e656cE.I.N.F.O.kernel
0x11e4e33322e646c6c004c6f61644c6962726132.dll.LoadLibra
0x11e5e7279410047657450726f634164647265ryA.GetProcAddre
0x11e6e737300cccccccccc0ce0000000000000ss..............
0x11e7e00000000481e01000ce00000cf234100....H........#A.
0x11e8eefbeedfe000000000090000000000000................
0x11e9e00433a5c5c50726f6772616d2046696c.C:\\Program Fil
0x11eae65735c436f6d6d6f6e2046696c65735ces\Common Files\
⋯13 more rows
0x11f8e00000000000000000000000000000000................
0x11f9e00000000000040004d5a900003000000[email protected]......
0x11fae04000000ffff0000b800000000000000................
0x11fbe40000000000000000000000000000000@...............
0x11fce00000000000000000000000000000000................
0x11fde00000000d80000000e1fba0e00b409cd................
0x11fee21b8014ccd21546869732070726f6772!..L.!This progr
Repeated FuTuRaX infected-host separator 0x15946–0x15b86
⋯7 more rows
0x159b600000000000000000000000000000000................
0x159c6464143454841434b4552efbeedfe0000FACEHACKER......
0x159d60000003e05000000000000433a5c5c57...>.......C:\\W
0x159e6696e646f77735c65686f6d655c4d6372indows\ehome\Mcr
⋯14 more rows
0x15ad600000000000000000000000000000000................
0x15ae600004d5a90000300000004000000ffff..MZ............
0x15af60000b800000000000000400000000000..........@.....
0x15b0600000000000000000000000000000000................
0x15b160000000000000000000000000000f000................
⋯7 more rows
MEW executable-packer section 0xf80–0x1270
⋯7 more rows
0xff000000000000000000000000000000000................
0x1000041040000a06537472696e67ff254491[email protected].%D.
0x101040008bc0ff25409140008bc0ff253c91@....%@.@....%<.
0x102040008bc0ff25389140008bc0ff253491@....%8.@....%4.
0x103040008bc0ff25309140008bc0ff252c91@....%0.@....%,.
0x104040008bc0ff25289140008bc0ff252491@....%(.@....%$.
0x105040008bc0ff25209140008bc0ff251c91@....% .@....%..
0x106040008bc0ff25189140008bc0ff255491@....%..@....%T.
0x107040008bc0ff25149140008bc0ff255091@....%..@....%P.
0x108040008bc0ff25109140008bc0ff250c91@....%..@....%..
0x109040008bc0ff25089140008bc0ff250491@....%..@....%..
0x10a040008bc0ff25009140008bc0ff25fc90@....%..@....%..
0x10b040008bc0ff25f89040008bc0ff256491@....%..@....%d.
0x10c040008bc0ff25609140008bc0ff255c91@....%`.@....%\.
0x10d040008bc0ff256c9140008bc0ff25f490@....%l.@....%..
0x10e040008bc0ff25f09040008bc0ff25ec90@....%..@....%..
0x10f040008bc0ff25e89040008bc05383c4bc@....%[email protected]...
0x1100bb0a00000054e8a1fffffff644242c01.....T......D$,.
0x111074050fb75c24308bc383c4445bc38bc0t...\$0....D[...
0x1120ff25e49040008bc0ff25e09040008bc0.%..@....%..@...
0x1130ff25dc9040008bc0ff25d89040008bc0.%..@....%..@...
0x1140ff25d49040008bc0ff25d09040008bc0.%..@....%..@...
0x1150ff25cc9040008bc0ff25c89040008bc0.%..@....%..@...
0x11605356bed0854000833e00753a68440600SV...@..>.u:hD..
0x1170006a00e8a8ffffff8bc885c9750533c0.j..........u.3.
0x11805e5bc3a1cc8540008901890dcc854000^[....@.......@.
0x119033d28bc203c08d44c1048b1e891889063......D........
0x11a04283fa6475ec8b068b1089165e5bc390B..du.......^[..
0x11b08900894004c38bc053568bf28bd8e89d[email protected]......
0x11c0ffffff85c0750533c05e5bc38b168950.....u.3.^[....P
0x11d0088b560489500c8b1389108958048942..V..P......X..B
0x11e0048903b0015e5bc38b50048b08890a89.....^[..P......
0x11f051048b15d08540008910a3d0854000c3Q.....@......@..
0x120053565755518bf18914248be88b5d008bSVWUQ....$...]..
0x121004248b1089168b50048956048b3b8b06.$.....P..V..;..
0x12208b530803530c3bc275148bc3e8b7ffff.S..S.;.u.......
0x1230ff8b430889068b430c014604eb150346..C....C..F....F
0x1240043b4308750d8bc3e89bffffff8b430c.;C.u.........C.
0x12500146048bdf3beb75c38bd68bc5e856ff.F...;.u......V.
0x1260ffff84c0750433c089065a5d5f5e5bc3....u.3...Z]_^[.
0x12705356575583c4f88bd88bfb8b328b4308SVWU........2.C.
FuTuRaX installed executable name 0x4e54–0x4fd4
0x4e54ffffebf08bc35b595dc38bc0558bec33......[Y]...U..3
0x4e64c05568b94e400064ff30648920ff05e8[email protected]. ...
0x4e748740007532b8e4874000e82de8ffffb8[email protected][email protected]....
0x4e84e0874000e823e8ffffb8dc874000e819..@..#......@...
0x4e94e8ffffb8d8874000e80fe8ffffb8d487......@.........
0x4ea44000e805e8ffff33c05a595964891068@......3.ZYYd..h
0x4eb4c04e4000c3e98ee2ffffebf85dc38bc0.N@.........]...
0x4ec4832de887400001c3ffffffff0b000000.-..@...........
0x4ed4667574757261782e6578650053565755futurax.exe.SVWU
0x4ee481c48cfaffff8dbc24740100008d6c24........$t....l$
0x4ef408c605f0874000016a006a026a02e859[email protected]
0x4f04f5ffff8bf083feff0f843a0100008d84..........:.....
0x4f142454010000ba10000000e83df4ffff66$T.........=...f
0x4f24c784245401000002006a45e8ecf4ffff..$T.....jE.....
0x4f34668984245601000033c0898424580100f..$V...3...$X..
0x4f44006a108d8424580100005056e8a3f4ff.j...$X...PV....
0x4f54ff85c00f85ef000000c7042410000000...........$....
0x4f64548d842468010000506a006800020000T..$h...Pj.h....
0x4f748d8424840300005056e8bef4ffff85c0..$....PV.......
0x4f840f8ec200000033db8b15148840008bc5......3.....@...
0x4f94e86fdaffffa110754000c60000ba0100.o.....u@.......
0x4fa400008bc5e813ddffffe82ad6ffff85c0..........*.....
0x4fb40f85a6000000436a03e85ef4ffff24ff......Cj..^...$.
0x4fc488076a03e853f4ffff66c1e808884701..j..S...f....G.
0x4fd453e846f4ffff24ff884702 S.F...$..G.
FuTuRaX virus author banner 0x618c–0x632c
0x618ce8464000f8454000c44e4000604e4000[email protected]@..N@.`N@.
0x619c0000000020614000558bec83c4f0b854.... [email protected]
0x61ac614000e8d4dfffff33c05568f5614000[email protected]@.
0x61bc64ff30648920b8ec874000ba0c624000d.0d. [email protected]@.
0x61cce833d5ffff6a006834624000e85fe1ff.3...j.h4b@.._..
0x61dcffe862feffffe8b9f8ffff33c05a5959..b........3.ZYY
0x61ec64891068fc614000c3e952cfffffebf8[email protected].....
0x61fce8bfd3ffff000000ffffffff26000000............&...
0x620c46756c6c2044656c7068692056697275Full Delphi Viru
0x621c732f576f726d206d6164652042792046s/Worm made By F
0x622c7554755261580000433a5c50726f6772uTuRaX..C:\Progr
0x623c616d2046696c65735c496e7465726e65am Files\Interne
0x624c74204578706c6f7265725c494558504ct Explorer\IEXPL
0x625c4f5245203231322e33332e3233372e38ORE 212.33.237.8
0x626c362f696d616765732f312f7265706f726/images/1/repor
0x627c742e7068700000000000000000000000t.php...........
0x628c00000000000000000000000000000000................
0x629c00000000000000000000000000000000................
0x62ac00000000000000000000000000000000................
0x62bc00000000000000000000000000000000................
0x62cc00000000000000000000000000000000................
0x62dc00000000000000000000000000000000................
0x62ec00000000000000000000000000000000................
0x62fc00000000000000000000000000000000................
0x630c00000000000000000000000000000000................
0x631c00000000000000000000000000000000................
0x632c000000000000 ......
Four or more embedded standard PE images 0x11cfe–0x11fee
⋯7 more rows
0x11d6e59b8a113ed234d176236250000000000Y....#M.b6%.....
0x11d7e21da400000a0400008a04000b0704000!.@...@[email protected]@.
0x11d8e10b04000000000000000000000000000..@.............
⋯10 more rows
0x11e3e450049004e0046004f006b65726e656cE.I.N.F.O.kernel
0x11e4e33322e646c6c004c6f61644c6962726132.dll.LoadLibra
0x11e5e7279410047657450726f634164647265ryA.GetProcAddre
0x11e6e737300cccccccccc0ce0000000000000ss..............
0x11e7e00000000481e01000ce00000cf234100....H........#A.
0x11e8eefbeedfe000000000090000000000000................
0x11e9e00433a5c5c50726f6772616d2046696c.C:\\Program Fil
0x11eae65735c436f6d6d6f6e2046696c65735ces\Common Files\
⋯13 more rows
0x11f8e00000000000000000000000000000000................
0x11f9e00000000000040004d5a900003000000[email protected]......
0x11fae04000000ffff0000b800000000000000................
0x11fbe40000000000000000000000000000000@...............
0x11fce00000000000000000000000000000000................
0x11fde00000000d80000000e1fba0e00b409cd................
0x11fee21b8014ccd21546869732070726f6772!..L.!This progr
Repeated FuTuRaX infected-host separator 0x15946–0x15b86
⋯7 more rows
0x159b600000000000000000000000000000000................
0x159c6464143454841434b4552efbeedfe0000FACEHACKER......
0x159d60000003e05000000000000433a5c5c57...>.......C:\\W
0x159e6696e646f77735c65686f6d655c4d6372indows\ehome\Mcr
⋯14 more rows
0x15ad600000000000000000000000000000000................
0x15ae600004d5a90000300000004000000ffff..MZ............
0x15af60000b800000000000000400000000000..........@.....
0x15b0600000000000000000000000000000000................
0x15b160000000000000000000000000000f000................
⋯7 more rows

Showing the top 5 files — 1 more file (39 regions) not shown.

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.