General
- Target 2026-04-15_383ffce200a971d13c016653406e726a_amadey_cobalt-strike_darkgate_glassworm_icedid_njrat_redline-stealer_rhadamanthys_satacom_stop_vidar
- Size 15.7MB
- Sample260415-2prlnadx7w
- SHA256 1f8cb031958904987de1e3845fb075688635701b03f6e4a0d60085fffd50374f
- MD5 383ffce200a971d13c016653406e726a
- SHA1 d77b95351e74103a7b5dbb625cedbdd7d7564761
- SHA512 6d854d8f2b808ae4dc66cce7a75190ddd51596e732e81d113008e64110e320c9a24c37a485c718f144614e5c5f6c7f54dfbd5db6d21be5bac91a38bd45f40b6a
- SSDEEP 196608:2C+CXS5sC+CXS59mKC+CXS5sC+CXS59mm1tIDewjqkjiqM:2rv5srv5lrv5srv5N8Kweky
- TLSH T168F67C2967E480F5F5A79938887B8235EA727C204B33478F4690D66E6F336D19D38732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_383ffce200a971d13c016653406e726a_amadey_cobalt-strike_darkgate_glassworm_icedid_njrat_red.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_383ffce200a971d13c016653406e726a_amadey_cobalt-strike_darkgate_glassworm_icedid_njrat_red.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_383ffce200a971d13c016653406e726a_amadey_cobalt-strike_darkgate_glassworm_icedid_njrat_redline-stealer_rhadamanthys_satacom_stop_vidar
- Size 15.7MB
- SHA256 1f8cb031958904987de1e3845fb075688635701b03f6e4a0d60085fffd50374f
- MD5 383ffce200a971d13c016653406e726a
- SHA1 d77b95351e74103a7b5dbb625cedbdd7d7564761
- SHA512 6d854d8f2b808ae4dc66cce7a75190ddd51596e732e81d113008e64110e320c9a24c37a485c718f144614e5c5f6c7f54dfbd5db6d21be5bac91a38bd45f40b6a
- SSDEEP 196608:2C+CXS5sC+CXS59mKC+CXS5sC+CXS59mm1tIDewjqkjiqM:2rv5srv5lrv5srv5N8Kweky
- TLSH T168F67C2967E480F5F5A79938887B8235EA727C204B33478F4690D66E6F336D19D38732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.